CWE-94 · Code Injection (page 47)
Page 47 of 69 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-13043 | Critical | 9.8 | 2018-07-01 | scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuratio… |
CVE-2018-12995 | High | 8.8 | 2018-06-29 | onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen. |
CVE-2018-12994 | High | 8.8 | 2018-06-29 | onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen. |
CVE-2017-7465 | Critical | 9.0 | 2018-06-27 | It was found that the JAXP implementation used in JBoss EAP 7.0 for XSLT processing is vulnerable to code injection. An attacker could use this flaw to cause r… |
CVE-2018-11587 | Critical | 9.8 | 2018-06-25 | There is Remote Code Execution in Centreon 3.4.6 including Centreon Web 2.8.23 via the RPN value in the Virtual Metric form in centreonGraph.class.php. |
CVE-2018-12531 | Critical | 9.8 | 2018-06-18 | An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into config_db.php, a different vulnerability t… |
CVE-2017-3907 | Medium | 5.4 | 2018-06-13 | Code Injection vulnerability in the ePolicy Orchestrator (ePO) extension in McAfee Threat Intelligence Exchange (TIE) Server 2.1.0 and earlier allows remote at… |
CVE-2018-5158 | High | 8.8 | 2018-06-11 | The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious JavaScript to be injected through a crafted PDF file. This Ja… |
CVE-2017-7798 | High | 8.8 | 2018-06-11 | The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page source code. In the worst case, this could… |
CVE-2018-6512 | Critical | 9.8 | 2018-06-11 | The previous version of Puppet Enterprise 2018.1 is vulnerable to unsafe code execution when upgrading pe-razor-server. Affected releases are Puppet Enterprise… |
CVE-2018-11228 | Critical | 9.8 | 2018-06-08 | Crestron TSW-1060, TSW-760, TSW-560, TSW-1060-NC, TSW-760-NC, and TSW-560-NC devices before 2.001.0037.001 allow unauthenticated remote code execution via a Ba… |
CVE-2017-16151 | Critical | 9.8 | 2018-06-07 | Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions o… |
CVE-2017-16100 | Critical | 9.8 | 2018-06-07 | dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible. |
CVE-2017-16082 | Critical | 9.8 | 2018-06-07 | A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 l… |
CVE-2017-16042 | Critical | 9.8 | 2018-06-04 | Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command… |
CVE-2017-16020 | Critical | 9.8 | 2018-06-04 | Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the co… |
CVE-2018-7951 | High | 8.8 | 2018-06-01 | The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An auth… |
CVE-2018-7950 | High | 8.8 | 2018-06-01 | The iBMC (Intelligent Baseboard Management Controller) of some Huawei servers have a JSON injection vulnerability due to insufficient input validation. An auth… |
CVE-2016-10548 | Medium | 6.1 | 2018-05-31 | Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client… |
CVE-2016-10546 | Critical | 9.8 | 2018-05-31 | An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The… |
CVE-2016-10541 | Critical | 9.8 | 2018-05-31 | The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend on shell-qu… |
CVE-2014-10065 | Medium | 6.1 | 2018-05-31 | Certain input when passed into remarkable before 1.4.1 will bypass the bad protocol check that disallows the javascript: scheme allowing for javascript: url's… |
CVE-2018-1133 | High | 8.8 | 2018-05-25 | An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection. |
CVE-2018-1260 | Critical | 9.8 | 2018-05-11 | Spring Security OAuth, versions 2.3 prior to 2.3.3, 2.2 prior to 2.2.2, 2.1 prior to 2.1.2, 2.0 prior to 2.0.15 and older unsupported versions contains a remot… |
CVE-2018-2418 | Medium | 5.5 | 2018-05-09 | SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the application. An attacker could thereby cont… |
CVE-2018-10740 | Critical | 9.8 | 2018-05-04 | Axublog 1.1.0 allows remote Code Execution as demonstrated by injection of PHP code (contained in the webkeywords parameter) into the cmsconfig.php file. |
CVE-2018-1104 | High | 8.8 | 2018-05-02 | Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a job template to execute arbitrary code on… |
CVE-2018-10642 | High | 7.2 | 2018-05-02 | Command injection vulnerability in Combodo iTop 2.4.1 allows remote authenticated administrators to execute arbitrary commands by changing the platform configu… |
CVE-2018-8938 | Critical | 9.8 | 2018-05-01 | A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can inject a specially crafted SNMP… |
CVE-2018-10574 | Critical | 9.8 | 2018-04-30 | site/index.php/admin/trees/add/ in BigTree 4.2.22 and earlier allows remote attackers to upload and execute arbitrary PHP code because the BigTreeStorage class… |
CVE-2018-10517 | High | 7.2 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard contains a remote code execution vulnerability, exploitable by a… |
CVE-2018-10515 | High | 7.2 | 2018-04-27 | In CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard contains a remote code execution vulnerability exploitable by an a… |
CVE-2018-10429 | Critical | 9.8 | 2018-04-26 | Cosmo 1.0.0Beta6 allows attackers to execute arbitrary PHP code via the Database Prefix field on the Database Info screen of install.php. |
CVE-2017-1721 | Medium | 5.6 | 2018-04-26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow an unauthenticated user to execute code remotely with lower level privileges under unusual circumstances. IBM… |
CVE-2018-9113 | High | 7.8 | 2018-04-26 | Centers for Disease Control and Prevention MicrobeTRACE 0.1.12 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV f… |
CVE-2018-8974 | High | 7.8 | 2018-04-26 | Centers for Disease Control and Prevention MicrobeTRACE 0.1.11 allows remote attackers to execute arbitrary code, related to code injection via a crafted CSV f… |
CVE-2018-10236 | High | 7.2 | 2018-04-19 | POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.php 'add' function because an attacker c… |
CVE-2018-10235 | High | 7.2 | 2018-04-19 | POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting.php 'index' function because an attacke… |
CVE-2018-10133 | Critical | 9.8 | 2018-04-16 | PbootCMS v0.9.8 allows PHP code injection via an IF label in index.php/About/6.html or admin.php/Site/index.html, related to the parserIfLabel function in \app… |
CVE-2018-10086 | High | 7.2 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function… |
CVE-2018-1028 | High | 8.8 | 2018-04-12 | A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Grap… |
CVE-2018-1275 | Critical | 9.8 | 2018-04-11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocke… |
CVE-2018-1273 | Critical | 9.8 | 2018-04-11 | Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by imprope… |
CVE-2018-9848 | Critical | 9.8 | 2018-04-07 | In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to execute arbitrary PHP code by first using… |
CVE-2018-9847 | Critical | 9.8 | 2018-04-07 | In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to execute arbitrary PHP code by placing this c… |
CVE-2018-1270 | Critical | 9.8 | 2018-04-06 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocke… |
CVE-2017-3967 | Medium | 6.1 | 2018-04-04 | Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject… |
CVE-2018-9175 | Critical | 9.8 | 2018-04-02 | DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the egroup parameter to uploads/dede/stepselect_main.php because code within the database… |
CVE-2018-9174 | Critical | 9.8 | 2018-04-02 | sys_verifies.php in DedeCMS 5.7 allows remote attackers to execute arbitrary PHP code via the refiles array parameter, because the contents of modifytmp.inc ar… |
CVE-2018-8823 | Critical | 9.8 | 2018-03-28 | modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows… |
CVE-2014-2293 | Critical | 9.8 | 2018-03-26 | Zikula Application Framework before 1.3.7 build 11 allows remote attackers to conduct PHP object injection attacks and delete arbitrary files or execute arbitr… |
CVE-2018-8966 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as demonstrated by injecting a phpinfo() cal… |
CVE-2018-1207 | Critical | 9.8 | 2018-03-23 | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated… |
CVE-2017-1789 | Critical | 9.8 | 2018-03-22 | IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-Force ID: 137034. |
CVE-2018-8074 | High | 8.1 | 2018-03-21 | Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elastics… |
CVE-2018-8073 | Critical | 9.8 | 2018-03-21 | Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with the Redis extension. |
CVE-2011-3178 | High | 8.1 | 2018-03-20 | In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute she… |
CVE-2018-8756 | High | 7.2 | 2018-03-18 | Eval injection in yzmphp/core/function/global.func.php in YzmCMS v3.7.1 allows remote attackers to achieve arbitrary code execution via PHP code in the POST da… |
CVE-2018-7756 | Critical | 9.8 | 2018-03-15 | RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TCP port 1999, which allows remote attacke… |
CVE-2018-5782 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5781 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5780 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-5779 | Critical | 9.8 | 2018-03-14 | A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allo… |
CVE-2018-8097 | Critical | 9.8 | 2018-03-14 | io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter. |
CVE-2018-1000070 | High | 8.8 | 2018-03-13 | Bitmessage PyBitmessage version v0.6.2 (and introduced in or after commit 8ce72d8d2d25973b7064b1cf76a6b0b3d62f0ba0) contains a Eval injection vulnerability in… |
CVE-2018-7466 | High | 7.5 | 2018-02-25 | install/installNewDB.php in TestLink through 1.9.16 allows remote attackers to conduct injection attacks by leveraging control over DB LOGIN NAMES data during… |
CVE-2018-6488 | High | 8.1 | 2018-02-22 | Arbitrary Code Execution vulnerability in Micro Focus Universal CMDB, version 4.10, 4.11, 4.12. This vulnerability could be remotely exploited to allow Arbitra… |
CVE-2018-7271 | High | 8.1 | 2018-02-21 | An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php configuration file filtering is not rigo… |
CVE-2017-16670 | High | 7.8 | 2018-02-19 | The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL project file. |
CVE-2018-6889 | High | 8.8 | 2018-02-12 | An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache… |
CVE-2018-6574 | High | 7.8 | 2018-02-07 | Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leverag… |
CVE-2018-0007 | Critical | 9.8 | 2018-01-10 | An unauthenticated network-based attacker able to send a maliciously crafted LLDP packet to the local segment, through a local segment broadcast, may be able t… |
CVE-2018-2363 | High | 8.8 | 2018-01-09 | SAP NetWeaver, SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, contains code that allows you to execute arbitrary program… |
CVE-2017-16905 | High | 8.1 | 2018-01-05 | The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently ach… |
CVE-2017-1000480 | Critical | 9.8 | 2018-01-03 | Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template na… |
CVE-2017-17098 | Critical | 9.8 | 2018-01-02 | The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject arbitrary PHP code v… |
CVE-2017-17649 | Medium | 6.1 | 2017-12-18 | Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter. |
CVE-2017-16682 | High | 7.2 | 2017-12-12 | SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker with administrator creden… |
CVE-2017-1336 | Medium | 4.4 | 2017-12-07 | IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244. |
CVE-2016-5713 | Critical | 9.8 | 2017-12-06 | Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet run… |
CVE-2017-14198 | High | 8.8 | 2017-11-30 | An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions to edit design assets can cause Remote Co… |
CVE-2017-1001004 | High | 8.8 | 2017-11-27 | typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result… |
CVE-2017-1001002 | Critical | 9.8 | 2017-11-27 | math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitra… |
CVE-2017-16664 | High | 8.8 | 2017-11-21 | Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent i… |
CVE-2017-16544 | High | 8.8 | 2017-11-20 | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a direct… |
CVE-2017-14077 | Medium | 6.1 | 2017-11-18 | HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT']… |
CVE-2017-16871 | High | 8.1 | 2017-11-17 | The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/updraftplus/a… |
CVE-2017-1000196 | Critical | 9.8 | 2017-11-17 | October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on th… |
CVE-2017-15806 | High | 8.1 | 2017-11-15 | The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail re… |
CVE-2014-4000 | High | 8.8 | 2017-11-15 | Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, re… |
CVE-2017-16783 | Critical | 9.8 | 2017-11-10 | In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter. |
CVE-2017-7411 | High | 8.8 | 2017-10-30 | An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentElements() method is using the unserializ… |
CVE-2017-15935 | High | 7.2 | 2017-10-27 | Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function. This is only exploitable by administrators who up… |
CVE-2017-15376 | Critical | 9.8 | 2017-10-16 | The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23. |
CVE-2017-14353 | High | 8.8 | 2017-10-05 | A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remo… |
CVE-2015-6576 | High | 8.8 | 2017-10-03 | Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecifie… |
CVE-2017-13676 | High | 7.0 | 2017-09-28 | Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for executi… |
CVE-2017-14764 | High | 8.8 | 2017-09-27 | In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module. |
CVE-2014-9463 | High | 8.8 | 2017-09-15 | functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer header to visitorme… |
CVE-2017-2809 | High | 7.5 | 2017-09-14 | An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python com… |