VYPR

CWE-94

Improper Control of Generation of Code ('Code Injection')

BaseDraftLikelihood: Medium

Description

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-242 · CAPEC-35 · CAPEC-77

CVEs mapped to this weakness (6,979)

page 314 of 349
  • CVE-2021-29493MedMay 6, 2021
    risk 0.00cvss 6.5epss 0.01

    Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version…

  • CVE-2021-21415HigApr 29, 2021
    risk 0.00cvss 7.8epss 0.02

    Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by…

  • CVE-2021-29475CriApr 26, 2021
    risk 0.00cvss 10.0epss 0.01

    HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note content, there fore this exploit requires the…

  • CVE-2021-21433CriApr 9, 2021
    risk 0.00cvss 9.9epss 0.03

    Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.

  • CVE-2021-23338MedFeb 15, 2021
    risk 0.00cvss 6.6epss 0.04

    This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

  • CVE-2021-21248CriJan 15, 2021
    risk 0.00cvss 9.6epss 0.01

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec is used to define parameters of a Build spec. It does so by using dynamically generated Groovy classes. A user able to…

  • CVE-2021-21244CriJan 15, 2021
    risk 0.00cvss 10.0epss 0.01

    OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by disabling validation…

  • CVE-2020-28464CriJan 4, 2021
    risk 0.00cvss 9.8epss 0.03

    This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine.

  • CVE-2020-15147HigAug 21, 2020
    risk 0.00cvss 8.5epss 0.03

    Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit,…

  • CVE-2019-19502CriDec 2, 2019
    risk 0.00cvss 9.8epss 0.02

    Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.

  • CVE-2018-21023HigOct 8, 2019
    risk 0.00cvss 8.8epss 0.03

    getStats.php in Centreon Web before 2.8.28 allows authenticated attackers to execute arbitrary code via the ns_id parameter.

  • CVE-2019-14965CriAug 12, 2019
    risk 0.00cvss 9.8epss 0.03

    An issue was discovered in Frappe Framework 10 through 12 before 12.0.4. A server side template injection (SSTI) issue exists.

  • CVE-2019-10182HigJul 31, 2019
    risk 0.00cvss 8.2epss 0.03

    It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the…

  • CVE-2018-18836MedJun 18, 2019
    risk 0.00cvss 6.5epss 0.02

    An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.

  • CVE-2018-1999019CriJul 23, 2018
    risk 0.00cvss 9.8epss 0.03

    Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the…

  • CVE-2018-11587CriJun 25, 2018
    risk 0.00cvss 9.8epss 0.04

    There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php.

  • CVE-2018-10574CriApr 30, 2018
    risk 0.00cvss 9.8epss 0.02

    site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class in core/inc/bigtree/apis/storage.php does not prevent uploads of .htaccess files.

  • CVE-2018-9113HigApr 26, 2018
    risk 0.00cvss 7.8epss 0.04

    Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial '><script type="text/javascript" src=' line. Fix released on 2018-03-29.

  • CVE-2018-8974HigApr 26, 2018
    risk 0.00cvss 7.8epss 0.04

    Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV file with an initial 'Source<script type="text/javascript" src=' line. Fix released on 2018-03-28.

  • CVE-2018-1000070HigMar 13, 2018
    risk 0.00cvss 8.8epss 0.02

    Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0) contains a Eval injection vulnerability in main program, file src/messagetypes/__init__.py function constructObject that can result in Code Execution. This attack…