cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 87

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.9CVE-2023-46404EPSS 2.3%

    PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.

  2. 8.8CVE-2023-46947EPSS 1.3%

    Subrion 4.2.1 has a remote command execution vulnerability in the backend.

  3. 6.6CVE-2023-36022EPSS 1.2%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  4. 9.8CVE-2023-46958EPSS 1.3%

    An issue in lmxcms v.1.41 allows a remote attacker to execute arbitrary code via a crafted script to the admin.php file.

  5. 8.2CVE-2023-20063EPSS 0.5%

    A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that are running Cisco Firepower Management (FMC) Software could allow an authenticated…

  6. 7.8CVE-2023-42658EPSS 0.3%

    Archive command in Chef InSpec prior to 4.56.58 and 5.22.29 allow local command execution via maliciously crafted profile.

  7. 8.8CVE-2023-40050EPSS 1.5%

    Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with maliciously crafted profile allows remote code execution.

  8. 9.8CVE-2023-43792EPSS 0.7%

    baserCMS is a website development framework. In versions 4.6.0 through 4.7.6, there is a Code Injection vulnerability in the mail form of baserCMS. As of time of publication, no known patched versions are available.

  9. 7.5CVE-2020-36767EPSS 0.5%

    tinyfiledialogs (aka tiny file dialogs) before 3.8.0 allows shell metacharacters in titles, messages, and other input data.

  10. 9.8CVE-2023-5843EPSS 2.6%

    The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function. This allows unauthenticated attackers to execute code on the server. The p…

  11. 7.8CVE-2023-44141EPSS 0.3%

    Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file.

  12. 7.2CVE-2023-46865EPSS 24%

    /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an image/png IDAT chunk of a Company Logo image.

  13. 7.8CVE-2021-33636EPSS 0.3%

    When the isula load command is used to load malicious images, attackers can execute arbitrary code.

  14. 7.8CVE-2021-33635EPSS 0.6%

    When malicious images are pulled by isula pull, attackers can execute arbitrary code.

  15. 9.8CVE-2023-46509EPSS 0.9%

    An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component.

  16. 7.2CVE-2023-46818ExploitEPSS 19%

    An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

  17. 8.8CVE-2023-46816EPSS 0.7%

    An issue was discovered in SugarCRM 12 before 12.0.4 and 13 before 13.0.2. A Server Site Template Injection (SSTI) vulnerability has been identified in the GecControl action. By using a crafted request, custom PHP code can be injected via …

  18. 7.8CVE-2023-43352EPSS 0.6%

    An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Content Manager Menu component.

  19. 7.8CVE-2023-5623EPSS 0.2%

    NNM failed to properly set ACLs on its installation directory, which could allow a low privileged user to run arbitrary code with SYSTEM privileges where NNM is installed to a non-standard location

  20. 8.8CVE-2023-5044EPSS 60%

    Code injection via nginx.ingress.kubernetes.io/permanent-redirect annotation.

  21. 9.8CVE-2023-46010EPSS 1.4%

    An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.

  22. 8.8CVE-2023-37909EPSS 1.9%

    XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, any user who can edit their own user profile can execute arb…

  23. 9.8CVE-2023-30912EPSS 1.6%

    A remote code execution issue exists in HPE OneView.

  24. 7.8CVE-2023-28796EPSS 0.2%

    Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

  25. 7.8CVE-2023-28793EPSS 0.3%

    Buffer overflow vulnerability in the signelf library used by Zscaler Client Connector on Linux allows Code Injection. This issue affects Zscaler Client Connector for Linux: before 1.3.1.6.

  26. 8.8CVE-2023-46055EPSS 1.5%

    An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint.

  27. 7.8CVE-2023-41898EPSS 0.2%

    Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript ex…

  28. 9.8CVE-2023-30131EPSS 0.9%

    An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unspecified impacts via unauthenticated API calls.

  29. 9.8CVE-2023-46042EPSS 25%

    An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

  30. 9.8CVE-2023-41630EPSS 1.5%

    eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component.

  31. 9.6CVE-2023-45144EPSS 1.2%

    com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in via the OAuth method, the identityOAuth parameters sent in the GET request is vuln…

  32. 2.0CVE-2023-5578EPSS 0.5%

    A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the inpu…

  33. 9.8CVE-2023-29453EPSS 0.9%

    Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript …

  34. 8.8CVE-2023-43661EPSS 52%

    Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6fb0…

  35. 7.2CVE-2023-36789EPSS 2.5%

    Skype for Business Remote Code Execution Vulnerability

  36. 7.8CVE-2023-36718EPSS 1.3%

    Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability

  37. 7.8CVE-2023-36702EPSS 0.8%

    Microsoft DirectMusic Remote Code Execution Vulnerability

  38. 7.3CVE-2023-36592EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  39. 7.3CVE-2023-36591EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  40. 7.3CVE-2023-36589EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  41. 7.3CVE-2023-36575EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  42. 7.3CVE-2023-36574EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  43. 7.3CVE-2023-36573EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  44. 7.3CVE-2023-36572EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  45. 7.3CVE-2023-36571EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  46. 7.3CVE-2023-36570EPSS 0.8%

    Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

  47. 9.8CVE-2023-43625EPSS 1.4%

    A vulnerability has been identified in Simcenter Amesim (All versions < V2021.1). The affected application contains a SOAP endpoint that could allow an unauthenticated remote attacker to perform DLL injection and execute arbitrary code in …

  48. 7.2CVE-2023-44847EPSS 1.0%

    An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component.

  49. 8.8CVE-2023-44846EPSS 1.1%

    An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component.

  50. 9.0CVE-2023-44392EPSS 0.8%

    Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a dependency on the cryo library, which is vulnerable to code injection due to an insecure implementation of deserializati…