CWE-94

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

OpenMetadata is a unified platform for discovery, observability, and governance powered by a central metadata repository

Grav is an open-source, flat-file content management system. Grav CMS prior to version 1.7.45 is vulnerable to a Server-

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, Grav validates accessible function

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to

Grav is an open-source, flat-file content management system. Prior to version 1.7.45, due to the unrestricted access to

ClickUp Desktop before 3.3.77 on macOS and Windows allows code injection because of specific Electron Fuses. There is in

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitr

Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4

Lack of sanitization during Installation Process in Dolibarr ERP CRM up to version 19.0.0 allows an attacker with adjace

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.

HTML injection vulnerability in Enpass Password Manager Desktop Client 6.9.2 for Windows and Linux allows attackers to r

Wazuh is a free and open source platform used for threat prevention, detection, and response. A wrong validation in the

An issue in phiola/src/afilter/pcm_convert.h:513 of phiola v2.0-rc22 allows a remote attacker to execute arbitrary code

An issue in V-SOL G/EPON ONU HG323AC-B with firmware version V2.0.08-210715 allows an attacker to execute arbtirary code

The Breakdance plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.7.1 v

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulner

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulner

A command injection vulnerability exists in the RunGptLLM class of the llama_index library, version 0.9.47, used by the

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Control of Generation of Code (

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 5.2 of Confluence Data Center and

The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin for WordPress is vulnerable to Remote Code

Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a malicious

Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitr

In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. Thi

Xenforo before 2.2.16 allows code injection.

An arbitrary file upload vulnerability in the Upload Template function of Dolibarr ERP CRM up to v19.0.1 allows attacker

The Custom Field Suite plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 2.

An issue was discovered in Artifex Ghostscript before 10.03.1. contrib/opvp/gdevopvp.c allows arbitrary code execution v

SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is due to the fact that although admin_template

There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some

An arbitrary file upload vulnerability in the component /admin/cmsWebFile/save of PublicCMS v4.0.202302.e allows attacke

PublicCMS v4.0.202302.e was discovered to contain a remote commande execution (RCE) vulnerability via the cmdarray param

A vulnerability in the package_index module of pypa/setuptools versions up to 69.1.1 allows for remote code execution vi

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a do

Vulnerability in SonicWall SMA100 NetExtender Windows (32 and 64-bit) client 10.2.339 and earlier versions allows an att

On versions before 2.1.4, a user could log in and perform a template injection attack resulting in Remote Code Execution

OpenAM is an open access management solution. In versions 15.0.3 and prior, the `getCustomLoginUrlTemplate` method in Re

Versions of Delphix Engine prior to Release 25.0.0.0 contain a flaw which results in Remote Code Execution (RCE).

Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insu

A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulner

Attackers with a valid username and password can exploit a python code injection vulnerability during the natural login

A flaw was found in the Fence Agents Remediation operator. This vulnerability can allow a Remote Code Execution (RCE) pr

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.ph

An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_nam

The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation an

Zohocorp ManageEngine OpManager and Remote Monitoring and Management versions 128329 and below are vulnerable to the aut