CWE-94

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows att

AutoCMS v5.4 was discovered to contain a PHP code injection vulnerability via the txtsite_url parameter at /admin/site_a

An issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pi

Cacti is an open source performance and fault management framework. An admin user can create a device with a malicious h

Kliqqi-CMS has a background arbitrary code execution vulnerability that attackers can exploit to implant backdoors or ge

MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active

CycloneDX cdxgen through 10.10.7, when run against an untrusted codebase, may execute code contained within build-relate

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to arbitrary PHP Code Injection due to missing

The eladmin v2.7 and before contains a remote code execution (RCE) vulnerability that can control all application deploy

Joplin is an open source, privacy-focused note taking app with sync capabilities for Windows, macOS, Linux, Android and

A Improper Control of Generation of Code ('Code Injection') vulnerability in plugin management in iota C.ai Conversation

Improper Control of Generation of Code ('Code Injection') vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math

OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.

IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers fo

An issue was discovered in Znuny 7.0.1 through 7.0.16 where the ticket detail view in the customer front allows the exec

An issue in onethink v.1.1 allows a remote attacker to execute arbitrary code via a crafted script to the AddonsControll

MongoDB Compass may be susceptible to code injection due to insufficient sandbox protection settings with the usage of e

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK ap

Delinea addressed a reported case on Secret Server v11.7.31 (protocol handler version 6.0.3.26) where, within the protoc

An issue in Blurams Lumi Security Camera (A31C) v.2.3.38.12558 allows a physically proximate attackers to execute arbitr

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations.

Pug through 3.0.2 allows JavaScript code execution if an application accepts untrusted input for the name option of the

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR16, 4.0.0 SR06, 4.1.0 SR04, 4.2.0 SR03, and 4.3.0 SR01 fails

The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling

A improper neutralization of special elements used in a template engine [CWE-1336] in FortiManager versions 7.4.1 and be

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a l

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplay

An issue in zuoxingdong lagom v.0.1.2 allows a local attacker to execute arbitrary code via the pickle_load function of

An issue was discovered in osCommerce v4, allows local attackers to bypass file upload restrictions and execute arbitrar

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 A

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Devi

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Devi

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the H

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 d

Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Lice

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series ver

OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the

An issue was discovered in version of Warp Terminal prior to 2024.07.18 (v0.2024.07.16.08.02). A command injection vulne

RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in langua

A vulnerability in the Web Conferencing Component of Mitel MiCollab through 9.8.1.5 could allow an authenticated attacke

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an att

The FOX – Currency Switcher Professional for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Exe

The Booster for WooCommerce plugin is vulnerable to Unauthenticated Arbitrary Shortcode Execution in versions up to, and

The The Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro plugin for WordPress for WordPress is vulnerab

The The Orders Tracking for WooCommerce plugin for WordPress for WordPress is vulnerable to arbitrary shortcode executio

The Simple Basic Contact Form plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all v

Unchecked script execution in Graphic on-click binding in affected LibreOffice versions allows an attacker to create a d

The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and i

The The Album and Image Gallery plus Lightbox plugin for WordPress is vulnerable to arbitrary shortcode execution in all