cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 103

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2020-10176EPSS 2.3%

    ASSA ABLOY Yale WIPC-301W 2.x.2.29 through 2.x.2.43_p1 devices allow Eval Injection of commands.

  2. 9.8CVE-2020-7609EPSS 1.6%

    node-rules including 3.0.0 and prior to 5.0.0 allows injection of arbitrary commands. The argument rules of function "fromJSON()" can be controlled by users without any sanitization.

  3. 8.8CVE-2020-5739EPSS 5.3%

    Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additional Settings" field in the web interface…

  4. 6.1CVE-2019-19089EPSS 1.1%

    For ABB eSOMS versions 4.0 to 6.0.3, the X-Content-Type-Options Header is missing in the HTTP response, potentially causing the response body to be interpreted and displayed as different content type other than declared. A possible attack …

  5. 9.8CVE-2020-10948EPSS 6.7%

    Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a ser…

  6. 9.8CVE-2019-9163EPSS 2.3%

    The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.

  7. 8.8CVE-2020-5558EPSS 2.1%

    CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.

  8. 9.8CVE-2020-5553EPSS 2.3%

    mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors.

  9. 7.1CVE-2020-10684EPSS 0.3%

    A flaw was found in Ansible Engine, all versions 2.7.x, 2.8.x and 2.9.x prior to 2.7.17, 2.8.9 and 2.9.6 respectively, when using ansible_facts as a subkey of itself and promoting it to a variable when inject is enabled, overwriting the an…

  10. 9.8CVE-2020-7480EPSS 1.5%

    A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewable when an attacker interferes with an a…

  11. 8.8CVE-2020-6650EPSS 2.1%

    UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” …

  12. 6.7CVE-2020-8140EPSS 0.7%

    A code injection in Nextcloud Desktop Client 2.6.2 for macOS allowed to load arbitrary code when starting the client with DYLD_INSERT_LIBRARIES set in the environment.

  13. 9.8CVE-2020-8137EPSS 4.3%

    Code injection vulnerability in blamer 1.0.0 and earlier may result in remote code execution when the input can be controlled by an attacker.

  14. 7.5CVE-2019-16108EPSS 1.1%

    phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheets (CSS) token sequence to a page through BBCode.

  15. 7.2CVE-2019-18582EPSS 4.6%

    Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user wit…

  16. 9.8CVE-2019-19208ExploitEPSS 19%

    Codiad Web IDE through 2.8.4 allows PHP Code injection.

  17. 8.8CVE-2020-8141EPSS 2.2%

    The dot package v1.1.2 uses Function() to compile templates. This can be exploited by the attacker if they can control the given template or if they can control the value set on Object.prototype.

  18. 7.2CVE-2020-10389EPSS 4.9%

    admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings.

  19. 9.8CVE-2020-5203EPSS 2.1%

    In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.

  20. 8.6CVE-2020-5259EPSS 2.0%

    In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An …

  21. 7.7CVE-2020-5258EPSS 4.0%

    In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. A…

  22. 9.8CVE-2020-10257ExploitEPSS 8.9%

    The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_a…

  23. 6.5CVE-2020-9530EPSS 1.5%

    An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a …

  24. 7.8CVE-2019-3695EPSS 0.5%

    A Improper Control of Generation of Code vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Develop…

  25. 9.8CVE-2020-8132EPSS 2.0%

    Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input.

  26. 9.8CVE-2020-9406EPSS 1.2%

    IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.

  27. 7.8CVE-2019-4000EPSS 0.7%

    Improper neutralization of directives in dynamically evaluated code in Druva inSync Mac OS Client 6.5.0 allows a local, authenticated attacker to execute arbitrary Python expressions with root privileges.

  28. 9.8CVE-2020-8518ExploitEPSS 72%

    Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.

  29. 9.8CVE-2020-8129EPSS 2.9%

    An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.

  30. 9.8CVE-2013-4211ExploitEPSS 71%

    A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code

  31. 8.8CVE-2013-4225EPSS 2.1%

    The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote authenticated users with the "access resou…

  32. 8.1CVE-2020-5529EPSS 4.7%

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android applica…

  33. 9.8CVE-2019-17268EPSS 2.4%

    The omniauth-weibo-oauth2 gem 0.4.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. Versions through 0.4.5, and 0.5.1 and later, are unaffected.

  34. 9.8CVE-2020-8644KEVExploitEPSS 87%

    PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

  35. 7.2CVE-2013-2267ExploitEPSS 8.8%

    PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.

  36. 9.8CVE-2020-6836EPSS 2.1%

    grammar-parser.jison in the hot-formula-parser package before 3.0.1 for Node.js is vulnerable to arbitrary code injection. The package fails to sanitize values passed to the parse function and concatenates them in an eval call. If a value …

  37. 9.8CVE-2019-20343EPSS 2.4%

    The MojoHaus Exec Maven plugin 1.1.1 for Maven allows code execution via a crafted XML document because a configuration element (within a plugin element) can specify an arbitrary program in an executable element (and can also specify arbit…

  38. 8.8CVE-2019-20155EPSS 2.5%

    An issue was discovered in report_edit.jsp in Determine (formerly Selectica) Contract Lifecycle Management (CLM) v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the un…

  39. 9.9CVE-2019-10758KEVExploitEPSS 85%

    mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

  40. 8.8CVE-2019-19909EPSS 1.4%

    An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2. Code injection can occur in the OJS report generator if an authenticated Journal Manager user visits a …

  41. 8.8CVE-2019-7486EPSS 1.6%

    Code injection in SonicWall SMA100 allows an authenticated user to execute arbitrary code in viewcacert CGI script. This vulnerability impacted SMA100 version 9.0.0.4 and earlier.

  42. 9.8CVE-2019-15599EPSS 2.7%

    A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

  43. 9.8CVE-2019-15598EPSS 2.7%

    A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able to control the input into the command.

  44. 9.8CVE-2019-15597EPSS 2.7%

    A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.

  45. 9.8CVE-2019-4716KEVExploitEPSS 86%

    IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

  46. 9.8CVE-2019-16774EPSS 1.2%

    In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.

  47. 9.8CVE-2019-10769EPSS 2.6%

    safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError.

  48. 9.8CVE-2019-16885EPSS 4.6%

    In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted cookie. This could happen at two places: first in view/ProductsView.php using the cookie price_filter…

  49. 6.5CVE-2019-3665EPSS 0.9%

    Code Injection vulnerability in the web interface in McAfee Web Advisor (WA) prior to 4.1.1.48 allows remote unauthenticated attacker to allow the browser to render a website which Web Advisor would normally have blocked via a carefully cr…

  50. 9.8CVE-2019-19502EPSS 1.9%

    Code injection in pluginconfig.php in Image Uploader and Browser for CKEditor before 4.1.9 allows remote authenticated users to execute arbitrary PHP code.