CWE-94

Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio a

B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the

Monkeytype is a minimalistic and customizable typing test. Monkeytype is vulnerable to Poisoned Pipeline Execution throu

Shopware, an open ecommerce platform, has a new Twig Tag `sw_silent_feature_call` which silences deprecation messages wh

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the `context` variable is injected into a

Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injectio

The Time Clock plugin and Time Clock Pro plugin for WordPress are vulnerable to Remote Code Execution in versions up to,

Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Cod

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vuln

ConnectWise ScreenConnect through 23.8.4 allows man-in-the-middle attackers to achieve remote code execution via crafted

The Check & Log Email plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and in

An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_Mdhd

An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to

The Email Log plugin for WordPress is vulnerable to Unauthenticated Hook Injection in all versions up to, and including,

The Vanna library uses a prompt function to present the user with visualized results, it is possible to alter the prompt

javascript-deobfuscator removes common JavaScript obfuscation techniques. In affected versions crafted payloads targetin

An arbitrary file upload vulnerability in Aegon Life v1.0 allows attackers to execute arbitrary code via uploading a cra

Kafka UI is an Open-Source Web UI for Apache Kafka Management. Kafka UI API allows users to connect to different Kafka b

Command injection when ingesting a remote Kaggle dataset due to a lack of input sanitization in the ingest_kaggle() API

An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade func

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'check

A low privileged remote attacker can perform configuration changes of the ospf service through OSPF_INTERFACE.SIMPLE_KEY

A low privileged remote attacker can perform configuration changes of the firewall services, including packet forwarding

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

A low privileged remote attacker can perform configuration changes of the firewall services, including packet filter, pa

The com.videodownload.browser.videodownloader (aka AppTool-Browser-Video All Video Downloader) application 20-30.05.24 f

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated que

The Inshot com.downloader.privatebrowser (aka Video Downloader - XDownloader) application through 1.3.5 for Android allo

The com.superfast.video.downloader (aka Super Unlimited Video Downloader - All in One) application through 5.1.9 for And

The com.video.downloader.all (aka All Video Downloader) application through 11.28 for Android allows an attacker to exec

The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attac

TorchGeo Remote Code Execution Vulnerability

Snyk has identified a remote code execution (RCE) vulnerability in all versions of Code Agent. The vulnerability enables

A potential attacker with access to the Westermo Lynx device may be able to execute malicious code that could affec

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute a

This High severity RCE (Remote Code Execution) vulnerability CVE-2024-21689  was introduced in versions 9.1.0, 9.2.0, 9.

An eval Injection vulnerability in the component invesalius/reader/dicom.py of InVesalius 3.1.99991 through 3.1.99998 al

Scriptcase v9.10.023 and before is vulnerable to Remote Code Execution (RCE) via the nm_zip function.

Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code In

A Client-Side Template Injection (CSTI) vulnerability in the component /project/new/scrum of Taiga v 8.6.1 allows remote

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries

This issue was addressed by forcing hardened runtime on the affected binaries at the system level. This issue is fixed i

This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and

Code Injection in paddlepaddle/paddle

The issue was addressed with improved memory handling. This issue is fixed in iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.

On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pro

An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languag

In Emacs before 29.3, arbitrary Lisp code is evaluated as part of turning on Org mode. This affects Org Mode before 9.6.

An issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers before 5.68.0 allows a l