CWE-94 · Code Injection (page 43)
Page 43 of 69 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-22336 | High | 7.5 | 2021-06-03 | There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of securi… |
CVE-2021-32924 | High | 8.8 | 2021-06-01 | Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder… |
CVE-2021-24312 | High | 7.2 | 2021-06-01 | The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super C… |
CVE-2021-30461 | Critical | 9.8 | 2021-05-29 | A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (whic… |
CVE-2021-32621 | High | 8.8 | 2021-05-28 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 12.6.7 and 12.10.3, a user withou… |
CVE-2021-29505 | High | 7.5 | 2021-05-28 | XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has suf… |
CVE-2021-22900 | High | 7.2 | 2021-05-27 | A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a fi… |
CVE-2021-22894 | High | 8.8 | 2021-05-27 | A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root use… |
CVE-2020-28905 | High | 8.8 | 2021-05-24 | Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination. |
CVE-2021-27811 | High | 7.2 | 2021-05-21 | A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation… |
CVE-2021-22117 | High | 7.8 | 2021-05-18 | RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesys… |
CVE-2019-14827 | Medium | 6.1 | 2021-05-17 | A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper t… |
CVE-2021-32820 | High | 8.6 | 2021-05-14 | Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express r… |
CVE-2021-32817 | Medium | 5.4 | 2021-05-14 | express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. Mo… |
CVE-2021-31198 | High | 7.8 | 2021-05-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-31181 | High | 8.8 | 2021-05-11 | Microsoft SharePoint Remote Code Execution Vulnerability |
CVE-2021-27611 | Medium | 6.7 | 2021-05-11 | SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attac… |
CVE-2021-29502 | High | 7.3 | 2021-05-10 | WarnSystem is a cog (plugin) for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by settin… |
CVE-2021-29493 | Medium | 6.5 | 2021-05-06 | Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users t… |
CVE-2021-21415 | High | 7.8 | 2021-04-29 | Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extens… |
CVE-2021-29472 | High | 8.8 | 2021-04-27 | Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctl… |
CVE-2021-29475 | Critical | 10.0 | 2021-04-26 | HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when e… |
CVE-2021-22205 | Critical | 10.0 | 2021-04-23 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a fi… |
CVE-2021-22204 | Medium | 6.8 | 2021-04-23 | Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image |
CVE-2021-29465 | High | 8.3 | 2021-04-22 | Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to ov… |
CVE-2021-29461 | High | 8.1 | 2021-04-20 | Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 cou… |
CVE-2021-29440 | High | 8.4 | 2021-04-13 | Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit page… |
CVE-2021-27602 | Critical | 9.9 | 2021-04-13 | SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to dr… |
CVE-2021-23281 | Critical | 10.0 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the da… |
CVE-2021-23277 | High | 8.3 | 2021-04-13 | Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax… |
CVE-2021-21433 | Critical | 9.9 | 2021-04-09 | Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote us… |
CVE-2021-1362 | High | 8.8 | 2021-04-08 | A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unifie… |
CVE-2021-24209 | High | 7.2 | 2021-04-05 | The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $c… |
CVE-2021-23358 | Low | 3.3 | 2021-03-29 | The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, pa… |
CVE-2021-27438 | High | 8.8 | 2021-03-25 | The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60… |
CVE-2021-21345 | Medium | 5.8 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-27928 | High | 7.2 | 2021-03-19 | A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server t… |
CVE-2021-27230 | High | 8.8 | 2021-03-15 | ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save() to write to an _… |
CVE-2021-3411 | Medium | 6.7 | 2021-03-09 | A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state… |
CVE-2021-21480 | High | 8.8 | 2021-03-09 | SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). An attacker can intercept a request to… |
CVE-2020-28502 | High | 8.1 | 2021-03-05 | This affects the package xmlhttprequest before 1.7.0; all versions of package xmlhttprequest-ssl. Provided requests are sent synchronously (async=False on xhr… |
CVE-2021-23344 | Critical | 9.8 | 2021-03-04 | The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set. |
CVE-2021-21353 | Medium | 6.8 | 2021-03-03 | Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option o… |
CVE-2021-25283 | Critical | 9.8 | 2021-02-27 | An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks. |
CVE-2021-3273 | High | 7.2 | 2021-02-25 | Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admi… |
CVE-2021-26120 | Critical | 9.8 | 2021-02-22 | Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring. |
CVE-2020-35339 | Critical | 9.8 | 2021-02-17 | In 74cms version 5.0.1, there is a remote code execution vulnerability in /Application/Admin/Controller/ConfigController.class.php and /ThinkPHP/Common/functio… |
CVE-2020-35734 | High | 7.2 | 2021-02-15 | Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab… |
CVE-2021-23337 | High | 7.2 | 2021-02-15 | Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. |
CVE-2021-25251 | High | 7.2 | 2021-02-10 | The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable… |
CVE-2020-28870 | Critical | 9.8 | 2021-02-10 | In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp… |
CVE-2021-21477 | Critical | 9.9 | 2021-02-09 | SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with th… |
CVE-2021-26551 | High | 8.8 | 2021-02-09 | An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating… |
CVE-2021-21305 | High | 7.4 | 2021-02-08 | CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and… |
CVE-2021-25770 | Critical | 9.8 | 2021-02-03 | In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution. |
CVE-2021-21277 | High | 8.5 | 2021-02-01 | angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is… |
CVE-2020-35754 | High | 7.2 | 2021-01-28 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input… |
CVE-2021-20187 | High | 7.2 | 2021-01-28 | It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP i… |
CVE-2021-21248 | Critical | 9.6 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec i… |
CVE-2021-21244 | Critical | 10.0 | 2021-01-15 | OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean… |
CVE-2021-21466 | High | 8.8 | 2021-01-12 | SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject cod… |
CVE-2020-35131 | Critical | 9.8 | 2021-01-08 | Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.p… |
CVE-2020-8274 | Medium | 6.5 | 2021-01-06 | Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read… |
CVE-2020-28464 | Critical | 9.8 | 2021-01-04 | This affects the package djv before 2.1.4. By controlling the schema file, an attacker can run arbitrary JavaScript code on the victim machine. |
CVE-2020-20298 | Critical | 9.8 | 2020-12-18 | Eval injection vulnerability in the parserCommom method in the ParserTemplate class in zzz_template.php in zzzphp 1.7.2 allows remote attackers to execute arbi… |
CVE-2020-28367 | High | 7.5 | 2020-11-18 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a… |
CVE-2020-28366 | High | 7.5 | 2020-11-18 | Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in… |
CVE-2020-11851 | Critical | 9.8 | 2020-11-17 | Arbitrary code execution vulnerability on Micro Focus ArcSight Logger product, affecting all version prior to 7.1.1. The vulnerability could be remotely exploi… |
CVE-2020-25557 | High | 8.8 | 2020-11-13 | In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the… |
CVE-2020-25538 | High | 8.8 | 2020-11-13 | An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In th… |
CVE-2020-7472 | Critical | 9.8 | 2020-11-12 | An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and… |
CVE-2020-17091 | High | 7.8 | 2020-11-11 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2020-7373 | Critical | 9.8 | 2020-10-30 | vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: thi… |
CVE-2020-7745 | High | 7.1 | 2020-10-19 | This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral… |
CVE-2020-15252 | High | 8.5 | 2020-10-16 | In XWiki before version 12.5 and 11.10.6, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context wh… |
CVE-2020-8349 | Critical | 9.8 | 2020-10-14 | An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS)’ optional REST AP… |
CVE-2017-18924 | High | 7.5 | 2020-10-04 | oauth2-server (aka node-oauth2-server) through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CV… |
CVE-2020-24628 | High | 8.8 | 2020-10-02 | A remote code injection vulnerability was discovered in HPE KVM IP Console Switches version(s): G2 4x1Ex32 Prior to 2.8.3. |
CVE-2020-18185 | Critical | 9.8 | 2020-10-02 | class.plx.admin.php in PluXml 5.7 allows attackers to execute arbitrary PHP code by modify the configuration file in a linux environment. |
CVE-2020-26124 | High | 8.8 | 2020-10-02 | openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_e… |
CVE-2020-15227 | High | 8.7 | 2020-10-01 | Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL th… |
CVE-2020-8243 | High | 7.2 | 2020-09-30 | A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitra… |
CVE-2019-20920 | High | 8.1 | 2020-09-30 | Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attack… |
CVE-2020-15371 | Critical | 9.8 | 2020-09-25 | Brocade Fabric OS versions before Brocade Fabric OS v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, contains code injection and privilege escalation vulnerabil… |
CVE-2019-7177 | High | 7.2 | 2020-09-25 | Pexip Infinity before 20.1 allows Code Injection onto nodes via an admin. |
CVE-2020-3513 | Medium | 6.7 | 2020-09-24 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services… |
CVE-2020-3416 | Medium | 6.7 | 2020-09-24 | Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services… |
CVE-2020-11804 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Due to improper sanitization of the parameter quid, used in the page mailqueue.php, code injection can occur… |
CVE-2020-11803 | High | 8.8 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter jaction when interacting with the page mailqueue.php could lead to PHP… |
CVE-2020-15171 | Medium | 6.6 | 2020-09-10 | In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context… |
CVE-2020-6318 | High | 7.2 | 2020-09-09 | A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an atta… |
CVE-2020-7381 | Medium | 5.8 | 2020-09-03 | In Rapid7 Nexpose installer versions prior to 6.6.40, the Nexpose installer calls an executable which can be placed in the appropriate directory by an attacker… |
CVE-2020-15167 | High | 8.2 | 2020-09-02 | In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitr… |
CVE-2020-6144 | Critical | 9.8 | 2020-09-01 | A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5… |
CVE-2020-6143 | Critical | 9.8 | 2020-09-01 | A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5… |
CVE-2020-15150 | Critical | 9.0 | 2020-09-01 | There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the pagina… |
CVE-2020-15147 | High | 8.5 | 2020-08-21 | Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specific… |
CVE-2020-7710 | High | 8.1 | 2020-08-21 | This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine. |
CVE-2020-15070 | High | 8.8 | 2020-08-21 | Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted… |
CVE-2020-15865 | Critical | 9.8 | 2020-08-18 | A Remote Code Execution vulnerability in Stimulsoft (aka Stimulsoft Reports) 2013.1.1600.0 allows an attacker to encode C# scripts as base-64 in the report XML… |