CWE-94 · Code Injection (page 48)
Page 48 of 69 — CVEs classified under CWE-94, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8759 | High | 7.8 | 2017-09-13 | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application… |
CVE-2015-9227 | High | 7.2 | 2017-09-11 | PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroCart 1.2.8 allows remote administrators t… |
CVE-2015-8351 | Critical | 9.0 | 2017-09-11 | PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticat… |
CVE-2017-14146 | High | 8.8 | 2017-09-05 | HelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a .php attachment and then requesting it in the helpdezk\app\upload… |
CVE-2017-3897 | Critical | 9.8 | 2017-09-01 | A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus… |
CVE-2014-8677 | Medium | 5.3 | 2017-08-31 | The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a… |
CVE-2017-0899 | Critical | 9.8 | 2017-08-31 | RubyGems version 2.6.12 and earlier is vulnerable to maliciously crafted gem specifications that include terminal escape characters. Printing the gem specifica… |
CVE-2017-1440 | High | 8.8 | 2017-08-30 | IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to sp… |
CVE-2017-10844 | High | 8.8 | 2017-08-29 | baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows an attacker to execute arbitrary PHP code on the server via unspecified vectors. |
CVE-2017-10835 | High | 8.8 | 2017-08-29 | "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to conduct code injection attacks via unspecified vectors. |
CVE-2014-8872 | High | 7.8 | 2017-08-29 | Improper Verification of Cryptographic Signature in AVM FRITZ!Box 6810 LTE after firmware 5.22, FRITZ!Box 6840 LTE after firmware 5.23, and other models with f… |
CVE-2017-6782 | Medium | 5.4 | 2017-08-17 | A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web int… |
CVE-2011-0469 | Critical | 9.8 | 2017-08-17 | Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. |
CVE-2017-1469 | High | 7.8 | 2017-08-14 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directori… |
CVE-2017-3753 | Medium | 6.8 | 2017-08-10 | A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, co… |
CVE-2017-11760 | High | 8.8 | 2017-07-31 | uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated ima… |
CVE-2017-11715 | Critical | 9.8 | 2017-07-28 | job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execut… |
CVE-2017-11675 | High | 8.8 | 2017-07-27 | The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authe… |
CVE-2017-11459 | Critical | 9.8 | 2017-07-25 | SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code v… |
CVE-2017-11585 | Critical | 9.8 | 2017-07-24 | dayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval Injection. |
CVE-2015-3640 | High | 7.5 | 2017-07-21 | phpMyBackupPro 2.5 and earlier does not properly escape the "." character in request parameters, which allows remote authenticated users with knowledge of a we… |
CVE-2015-3638 | High | 8.8 | 2017-07-21 | phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the p… |
CVE-2017-9822 | High | 8.8 | 2017-07-20 | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." |
CVE-2017-11421 | High | 7.8 | 2017-07-18 | gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue. There is a local attac… |
CVE-2015-0249 | High | 7.2 | 2017-07-17 | The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for a weblog to execute arbitrary Java code… |
CVE-2017-11167 | Critical | 9.8 | 2017-07-12 | FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain… |
CVE-2017-10968 | Critical | 9.8 | 2017-07-07 | In FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code execution by placing the code after "<?php" in a route=template… |
CVE-2017-9841 | Critical | 9.8 | 2017-06-27 | Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a… |
CVE-2017-6325 | Medium | 6.6 | 2017-06-26 | The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to affect web applica… |
CVE-2017-9807 | Critical | 9.8 | 2017-06-22 | An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an… |
CVE-2017-9774 | High | 8.8 | 2017-06-21 | Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication. |
CVE-2017-9771 | Critical | 9.8 | 2017-06-21 | install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_password p… |
CVE-2015-2252 | High | 8.8 | 2017-06-08 | Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary code with root privileges via a crafted U… |
CVE-2017-9442 | High | 8.8 | 2017-06-05 | BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package containing a PHP web shell, related to ex… |
CVE-2015-6531 | High | 7.8 | 2017-06-01 | Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafted firmware image fi… |
CVE-2017-8402 | High | 8.8 | 2017-05-31 | PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file. |
CVE-2017-7494 | Critical | 9.8 | 2017-05-30 | Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a sha… |
CVE-2017-8912 | High | 7.2 | 2017-05-12 | CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related… |
CVE-2017-7911 | High | 8.8 | 2017-05-06 | A Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An insufficient-encapsulation vulnerability has been identified, which ma… |
CVE-2017-8284 | High | 7.0 | 2017-04-26 | The disas_insn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction si… |
CVE-2016-4895 | High | 8.8 | 2017-04-12 | SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors. |
CVE-2017-7694 | High | 8.8 | 2017-04-11 | Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute cod… |
CVE-2017-7691 | Critical | 9.8 | 2017-04-11 | A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. |
CVE-2017-7625 | Critical | 9.8 | 2017-04-10 | In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code. |
CVE-2016-5072 | High | 8.8 | 2017-04-10 | OXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST request to the oxuser class. Fixed versions are Enterprise Edi… |
CVE-2017-7570 | High | 8.8 | 2017-04-07 | PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and th… |
CVE-2017-4964 | High | 8.8 | 2017-04-06 | Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, ak… |
CVE-2017-7402 | Critical | 9.8 | 2017-04-03 | Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request… |
CVE-2014-3927 | Critical | 9.8 | 2017-04-03 | mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code. |
CVE-2017-7324 | Critical | 9.8 | 2017-03-30 | setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the core_path parameter. |
CVE-2017-7321 | Critical | 9.8 | 2017-03-30 | setup/controllers/welcome.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP code via the config_key parameter to the… |
CVE-2014-3582 | Critical | 9.8 | 2017-03-29 | In Ambari 1.2.0 through 2.2.2, it may be possible to execute arbitrary system commands on the Ambari Server host while generating SSL certificates for hosts in… |
CVE-2017-6455 | High | 7.0 | 2017-03-27 | NTP before 4.2.8p10 and 4.3.x before 4.3.94, when using PPSAPI, allows local users to gain privileges via a DLL in the PPSAPI_DLLS environment variable. |
CVE-2015-0855 | Critical | 9.8 | 2017-03-23 | The _mediaLibraryPlayCb function in mainwindow.py in pitivi before 0.95 allows attackers to execute arbitrary code via shell metacharacters in a file path. |
CVE-2016-1602 | High | 7.8 | 2017-03-23 | A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 a… |
CVE-2017-6186 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allo… |
CVE-2016-8020 | High | 8.0 | 2017-03-14 | Improper control of generation of code vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users… |
CVE-2017-2968 | Critical | 9.1 | 2017-02-15 | Adobe Campaign versions 16.4 Build 8724 and earlier have a code injection vulnerability. |
CVE-2016-8354 | High | 7.0 | 2017-02-13 | An issue was discovered in Schneider Electric Unity PRO prior to V11.1. Unity projects can be compiled as x86 instructions and loaded onto the PLC Simulator de… |
CVE-2015-8771 | Critical | 9.8 | 2017-02-13 | The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password. |
CVE-2016-5727 | High | 8.8 | 2017-02-09 | LogInOut.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via vectors rela… |
CVE-2016-5726 | Critical | 9.8 | 2017-02-09 | Packages.php in Simple Machines Forum (SMF) 2.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the themecha… |
CVE-2016-6175 | Critical | 9.8 | 2017-02-07 | Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. |
CVE-2016-7102 | High | 8.4 | 2017-01-23 | ownCloud Desktop before 2.2.3 allows local users to execute arbitrary code and possibly gain privileges via a Trojan library in a "special path" in the C: driv… |
CVE-2016-2242 | Critical | 9.8 | 2017-01-23 | Exponent CMS 2.x before 2.3.7 Patch 3 allows remote attackers to execute arbitrary code via the sc parameter to install/index.php. |
CVE-2016-10157 | Critical | 9.8 | 2017-01-23 | Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete path. The issue is aggravated because th… |
CVE-2017-5543 | Critical | 9.8 | 2017-01-20 | includes/classes/ia.core.users.php in Subrion CMS 4.0.5 allows remote attackers to conduct PHP Object Injection attacks via crafted serialized data in a salt c… |
CVE-2016-10072 | Medium | 5.3 | 2016-12-27 | WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privi… |
CVE-2016-7968 | Medium | 6.5 | 2016-12-23 | KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. HTML Mail contents were not sanitized for JavaScript and included code wa… |
CVE-2016-7967 | High | 8.1 | 2016-12-23 | KMail since version 5.3.0 used a QWebEngine based viewer that had JavaScript enabled. Since the generated html is executed in the local file security context b… |
CVE-2016-7966 | High | 7.3 | 2016-12-23 | Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it… |
CVE-2016-7787 | Medium | 4.9 | 2016-12-23 | A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. |
CVE-2016-7954 | Critical | 9.8 | 2016-12-22 | Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: thi… |
CVE-2016-9949 | High | 7.8 | 2016-12-17 | An issue was discovered in Apport before 2.20.4. In apport/ui.py, Apport reads the CrashDB field and it then evaluates the field as Python code if it begins wi… |
CVE-2016-9862 | High | 7.5 | 2016-12-11 | An issue was discovered in phpMyAdmin. With a crafted login request it is possible to inject BBCode in the login page. All 4.6.x versions (prior to 4.6.5) are… |
CVE-2016-5424 | High | 7.1 | 2016-12-09 | PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 might allow remote authenticated users with the… |
CVE-2016-1000003 | Critical | 9.8 | 2016-10-07 | Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code. |
CVE-2016-5149 | High | 8.8 | 2016-09-11 | The extensions subsystem in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify a… |
CVE-2016-7110 | Critical | 9.8 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… |
CVE-2016-7109 | Critical | 9.8 | 2016-09-07 | Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 allows remote attackers to execute arbitrary commands via "special characters," a different vul… |
CVE-2015-5721 | Critical | 9.8 | 2016-09-03 | Malware Information Sharing Platform (MISP) before 2.3.90 allows remote attackers to conduct PHP object injection attacks via crafted serialized data, related… |
CVE-2016-2119 | High | 7.5 | 2016-07-07 | libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing… |
CVE-2016-5734 | Critical | 9.8 | 2016-07-03 | phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the preg_replace e (aka… |
CVE-2016-1413 | Medium | 6.5 | 2016-05-28 | The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a par… |
CVE-2016-3154 | Critical | 9.8 | 2016-04-08 | The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to… |
CVE-2016-3153 | Critical | 9.8 | 2016-04-08 | SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the fil… |
CVE-2015-5970 | Medium | 5.3 | 2016-02-18 | The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injection attacks, and r… |
CVE-2016-1986 | Critical | 9.8 | 2016-02-12 | HP Continuous Delivery Automation (CDA) 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache… |
CVE-2016-0033 | High | 7.5 | 2016-02-10 | Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 does not prevent recursive compilation of XSLT transforms, which allows remote attackers to… |
CVE-2016-1985 | Critical | 10.0 | 2016-01-30 | HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache… |
CVE-2015-8761 | Critical | 9.0 | 2016-01-08 | The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permis… |
CVE-2015-5242 | | 2015-11-25 | OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metadata, which allows remote authenticated u… | |
CVE-2015-7905 | | 2015-11-13 | Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. | |
CVE-2015-6555 | | 2015-11-12 | Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java p… | |
CVE-2015-7729 | | 2015-10-15 | Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated user… | |
CVE-2015-5647 | | 2015-10-12 | The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecifi… | |
CVE-2015-5646 | | 2015-10-12 | Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vectors, aka CyVDB-863 an… | |
CVE-2015-5644 | | 2015-10-06 | The installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unspecif… | |
CVE-2015-5643 | | 2015-10-06 | The installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which allows remote attackers to execute arbitrary PHP code via unsp… | |
CVE-2015-5687 | | 2015-10-05 | system/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a craf… |