CWE-94: Improper Control of Generation of Code (Code Injection), page 100

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

1. 8.8CVE-2017-18113EPSS 1.8%2021-08-02

   The DefaultOSWorkflowConfigurator class in Jira Server and Jira Data Center before version 8.18.1 allows remote attackers who can trick a system administrator to import their malicious workflow to execute arbitrary code via a Remote Code E…

2. 9.8CVE-2020-18172EPSS 1.3%2021-07-26

   A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.

3. 7.8CVE-2021-25808EPSS 1.2%2021-07-23

   A code injection vulnerability in backup/plugin.php of Bludit 3.13.1 allows attackers to execute arbitrary code via a crafted ZIP file.

4. 8.8CVE-2021-1518EPSS 1.9%2021-07-22

   A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to execute arbitrary code on the underlying operating system of an affected device. This vulnerability is…

5. 8.8CVE-2021-32756EPSS 1.5%2021-07-21

   ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be eva…

6. 8.1CVE-2021-32749EPSS 3.4%2021-07-16

   fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailin…

7. 6.5CVE-2021-33678EPSS 2.5%2021-07-14

   A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be execut…

8. 9.8CVE-2021-23390EPSS 3.0%2021-07-12

   The package total4 before 0.0.43 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

9. 9.8CVE-2021-23389EPSS 3.6%2021-07-12

   The package total.js before 3.4.9 are vulnerable to Arbitrary Code Execution via the U.set() and U.get() functions.

10. 8.1CVE-2021-1585EPSS 20%2021-07-08

    A vulnerability in the Cisco Adaptive Security Device Manager (ASDM) Launcher could allow an unauthenticated, remote attacker to execute arbitrary code on a user's operating system. This vulnerability is due to a lack of proper signature v…

11. 8.8CVE-2020-23219EPSS 1.6%2021-07-01

    Monstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into the "Snippet content" field under the "Edit Snippet" module.

12. 9.8CVE-2021-35514EPSS 1.4%2021-06-28

    Narou (aka Narou.rb) before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel.

13. 9.8CVE-2020-21784EPSS 1.4%2021-06-24

    phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php.

14. 8.8CVE-2020-22201EPSS 1.5%2021-06-16

    phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.

15. 6.5CVE-2021-25416EPSS 0.1%2021-06-11

    Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.

16. 5.5CVE-2021-25415EPSS 0.1%2021-06-11

    Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable.

17. 4.4CVE-2021-25411EPSS 0.1%2021-06-11

    Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory.

18. 5.5CVE-2021-25393EPSS 0.1%2021-06-11

    Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.

19. 7.3CVE-2021-31949EPSS 2.6%2021-06-08

    Microsoft Outlook Remote Code Execution Vulnerability

20. 9.8CVE-2021-32673EPSS 1.9%2021-06-08

    reg-keygen-git-hash-plugin is a reg-suit plugin to detect the snapshot key to be compare with using Git commit hash. reg-keygen-git-hash-plugin through and including 0.10.15 allow remote attackers to execute of arbitrary commands. Upgrade …

21. 7.5CVE-2021-22336EPSS 0.7%2021-06-03

    There is an Improper Control of Generation of Code vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause denial of security services on a rooted device.

22. 8.8CVE-2021-32924EPSS 20%2021-06-01

    Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method interacts unsafely with the IPS\_Theme::runProcessFunction …

23. 7.2CVE-2021-24312EPSS 1.9%2021-06-01

    The parameters $cache_path, $wp_cache_debug_ip, $wp_super_cache_front_page_text, $cache_scheduled_time, $cached_direct_pages used in the settings of WP Super Cache WordPress plugin before 1.7.3 result in RCE because they allow input of '$'…

24. 9.8CVE-2021-30461ExploitEPSS 37%2021-05-29

    A remote code execution issue was discovered in the web UI of VoIPmonitor before 24.61. When the recheck option is used, the user-supplied SPOOLDIR value (which might contain PHP code) is injected into config/configuration.php.

25. 8.8CVE-2021-32621EPSS 2.1%2021-05-28

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 12.6.7 and 12.10.3, a user without Script or Programming right is able to execute script requiring privileges by …

26. 8.8CVE-2021-29505ExploitEPSS 77%2021-05-28

    XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processe…

27. 7.2CVE-2021-22900KEVEPSS 14%2021-05-27

    A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web inter…

28. 8.8CVE-2021-22894KEVEPSS 41%2021-05-27

    A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as the root user via maliciously crafted meeting room.

29. 8.8CVE-2020-28905EPSS 26%2021-05-24

    Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination.

30. 7.2CVE-2021-27811EPSS 1.2%2021-05-21

    A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP code via exploitation of client_upgrade_edition.php and Upgrade.php.

31. 7.8CVE-2021-22117EPSS 0.6%2021-05-18

    RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins.

32. 6.1CVE-2019-14827EPSS 0.7%2021-05-17

    A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that c…

33. 8.6CVE-2021-32820ExploitEPSS 16%2021-05-14

    Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure v…

34. 6.8CVE-2021-32817EPSS 1.3%2021-05-14

    express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure vulnerabilitie…

35. 7.8CVE-2021-31198EPSS 4.9%2021-05-11

    Microsoft Exchange Server Remote Code Execution Vulnerability

36. 8.8CVE-2021-31181ExploitEPSS 29%2021-05-11

    Microsoft SharePoint Remote Code Execution Vulnerability

37. 6.7CVE-2021-27611EPSS 0.3%2021-05-11

    SAP NetWeaver AS ABAP, versions - 700, 701, 702, 730, 731, allow a high privileged attacker to inject malicious code by executing an ABAP report when the attacker has access to the local SAP system. The attacker could then get access to da…

38. 6.5CVE-2021-29502EPSS 0.8%2021-05-10

    WarnSystem is a cog (plugin) for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been p…

39. 8.8CVE-2021-29493EPSS 0.9%2021-05-06

    Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can u…

40. 7.8CVE-2021-21415EPSS 2.1%2021-04-29

    Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is s…

41. 8.8CVE-2021-29472EPSS 4.8%2021-04-27

    Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if …

42. 10.0CVE-2021-29475EPSS 1.2%2021-04-26

    HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note conte…

43. 10.0CVE-2021-22205KEVExploitEPSS 99.7%2021-04-23

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

44. 7.8CVE-2021-22204KEVExploitEPSS >99.9%2021-04-23

    Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

45. 9.8CVE-2021-29465EPSS 2.0%2021-04-22

    Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remo…

46. 8.8CVE-2021-29461EPSS 2.5%2021-04-20

    Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the …

47. 7.2CVE-2021-29440ExploitEPSS 30%2021-04-13

    Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arb…

48. 9.9CVE-2021-27602EPSS 2.1%2021-04-13

    SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker …

49. 10.0CVE-2021-23281EPSS 2.3%2021-04-13

    Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers …

50. 10.0CVE-2021-23277EPSS 1.0%2021-04-13

    Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function…