cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 95

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 9.8CVE-2021-26728EPSS 2.7%

    Command injection and stack-based buffer overflow vulnerabilities in the KillDupUsr_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue affects: Lanner…

  2. 9.8CVE-2021-26727EPSS 2.7%

    Multiple command injections and stack-based buffer overflows vulnerabilities in the SubNet_handler_func function of spx_restservice allow an attacker to execute arbitrary code with the same privileges as the server user (root). This issue …

  3. 8.8CVE-2022-43416EPSS 1.3%

    Jenkins Katalon Plugin 1.0.32 and earlier implements an agent/controller message that does not limit where it can be executed and allows invoking Katalon with configurable arguments, allowing attackers able to control agent processes to in…

  4. 8.1CVE-2022-39424EPSS 1.6%

    Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.40. Difficult to exploit vulnerability allows unauthenticated attacker with network access …

  5. 9.8CVE-2022-41544ExploitEPSS 14%

    GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.

  6. 7.8CVE-2022-41576EPSS 0.2%

    The rphone module has a script that can be maliciously modified.Successful exploitation of this vulnerability may cause irreversible programs to be implanted on user devices.

  7. 7.2CVE-2022-35944EPSS 1.1%

    October is a self-hosted Content Management System (CMS) platform based on the Laravel PHP Framework. This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the a…

  8. 7.2CVE-2022-41534EPSS 1.5%

    Online Diagnostic Lab Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /php_action/createOrder.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP fi…

  9. 9.8CVE-2022-42889ExploitEPSS >99.9%

    Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.common…

  10. 8.8CVE-2022-42902EPSS 1.7%

    In Linaro Automated Validation Architecture (LAVA) before 2022.10, there is dynamic code execution in lava_server/lavatable.py. Due to improper input sanitization, an anonymous user can force the lava-server-gunicorn service to execute use…

  11. 9.8CVE-2022-40871EPSS 35%

    Dolibarr ERP & CRM <=15.0.3 is vulnerable to Eval injection. By default, any administrator can be added to the installation page of dolibarr, and if successfully added, malicious code can be inserted into the database and then execute it b…

  12. 8.8CVE-2022-40469EPSS 3.1%

    iKuai OS v3.6.7 was discovered to contain an authenticated remote code execution (RCE) vulnerability.

  13. 7.8CVE-2022-40274EPSS 0.5%

    Gridea version 0.9.3 allows an external attacker to execute arbitrary code remotely on any client attempting to view a malicious markdown file through Gridea. This is possible because the application has the 'nodeIntegration' option enable…

  14. 8.8CVE-2022-40486EPSS 2.1%

    TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 57450(5553) was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file.

  15. 8.8CVE-2022-40497EPSS 1.6%

    Wazuh v3.6.1 - v3.13.5, v4.0.0 - v4.2.7, and v4.3.0 - v4.3.7 were discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Response endpoint.

  16. 9.8CVE-2022-21797EPSS 2.6%

    The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.

  17. 9.8CVE-2022-40628EPSS 2.2%

    This vulnerability exists in Tacitine Firewall, all versions of EN6200-PRIME QUAD-35 and EN6200-PRIME QUAD-100 between 19.1.1 to 22.20.1 (inclusive), due to improper control of code generation in the Tacitine Firewall web-based management …

  18. 9.8CVE-2022-3236KEVExploitEPSS 99%

    A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

  19. 9.8CVE-2022-26112EPSS 1.6%

    In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, we disabled the groovy function suppor…

  20. 7.2CVE-2022-36386EPSS 1.5%

    Authenticated Arbitrary Code Execution vulnerability in Soflyy Import any XML or CSV File to WordPress plugin <= 3.6.7 at WordPress.

  21. 8.8CVE-2022-28640EPSS 0.5%

    A potential local adjacent arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability was discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard…

  22. 9.8CVE-2022-41138EPSS 2.3%

    In Zutty before 0.13, DECRQSS in text written to the terminal can achieve arbitrary code execution.

  23. 6.1CVE-2022-3245EPSS 0.7%

    HTML injection attack is closely related to Cross-site Scripting (XSS). HTML injection uses HTML to deface the page. XSS, as the name implies, injects JavaScript into the page. Both attacks exploit insufficient validation of user input.

  24. 6.1CVE-2022-3242ExploitEPSS 1.9%

    Code Injection in GitHub repository microweber/microweber prior to 1.3.2.

  25. 8.8CVE-2022-36100EPSS 74%

    XWiki Platform Applications Tag and XWiki Platform Tag UI are tag applications for XWiki, a generic wiki platform. Starting with version 1.7 in XWiki Platform Applications Tag and prior to 13.10.6 and 14.4 in XWiki Platform Tag UI, the tag…

  26. 8.8CVE-2022-36099EPSS 76%

    XWiki Platform Wiki UI Main Wiki is software for managing subwikis on XWiki Platform, a generic wiki platform. Starting with version 5.3-milestone-2 and prior to versions 13.10.6 and 14.4, it's possible to inject arbitrary wiki syntax incl…

  27. 7.3CVE-2022-36069EPSS 1.3%

    Poetry is a dependency manager for Python. When handling dependencies that come from a Git repository instead of a registry, Poetry uses various commands, such as `git clone`. These commands are constructed using user input (e.g. the repos…

  28. 8.8CVE-2022-35847EPSS 0.9%

    An improper neutralization of special elements used in a template engine vulnerability [CWE-1336] in FortiSOAR management interface 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.4 may allow a remote and authenticated attacker to execute ar…

  29. 9.8CVE-2022-31860EPSS 2.4%

    An issue was discovered in OpenRemote through 1.0.4 allows attackers to execute arbitrary code via a crafted Groovy rule.

  30. 7.5CVE-2022-25813EPSS 67%

    In Apache OFBiz, versions 18.12.05 and earlier, an attacker acting as an anonymous user of the ecommerce plugin, can insert a malicious content in a message “Subject” field from the "Contact us" page. Then a party manager needs to list the…

  31. 7.8CVE-2022-36036EPSS 0.4%

    mdx-mermaid provides plug and play access to Mermaid in MDX. There is a potential for an arbitrary javascript injection in versions less than 1.3.0 and 2.0.0-rc1. Modify any mermaid code blocks with arbitrary code and it will execute when …

  32. 9.8CVE-2022-37053EPSS 2.3%

    TRENDnet TEW733GR v1.03B01 is vulnerable to Command injection via /htdocs/upnpinc/gena.php.

  33. 9.8CVE-2022-36756EPSS 3.3%

    DIR845L A1 v1.00-v1.03 is vulnerable to command injection via /htdocs/upnpinc/gena.php.

  34. 9.8CVE-2022-38078EPSS 2.1%

    Movable Type XMLRPC API provided by Six Apart Ltd. contains a command injection vulnerability. Sending a specially crafted message by POST method to Movable Type XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS com…

  35. 7.2CVE-2022-25812EPSS 1.7%

    The Transposh WordPress Translation WordPress plugin before 1.0.8 does not validate its debug settings, which could allow allowing high privilege users such as admin to perform RCE

  36. 7.2CVE-2022-36216EPSS 2.2%

    DedeCMS v5.7.94 - v5.7.97 was discovered to contain a remote code execution vulnerability in member_toadmin.php.

  37. 9.8CVE-2022-35516EPSS 2.6%

    DedeCMS v5.7.93 - v5.7.96 was discovered to contain a remote code execution vulnerability in login.php.

  38. 9.6CVE-2022-38193EPSS 0.9%

    There is a code injection vulnerability in Esri Portal for ArcGIS versions 10.8.1 and below that may allow a remote, unauthenticated attacker to pass strings which could potentially cause arbitrary code execution.

  39. 9.8CVE-2022-36262EPSS 1.9%

    An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.

  40. 8.8CVE-2022-36006EPSS 1.7%

    Arvados is an open source platform for managing, processing, and sharing genomic and other large scientific and biomedical data. A remote code execution (RCE) vulnerability in the Arvados Workbench allows authenticated attackers to execute…

  41. 7.8CVE-2022-30580EPSS 0.7%

    Code injection in Cmd.Start in os/exec before Go 1.17.11 and Go 1.18.3 allows execution of any binaries in the working directory named either "..com" or "..exe" by calling Cmd.Run, Cmd.Start, Cmd.Output, or Cmd.CombinedOutput when Cmd.Path…

  42. 7.8CVE-2022-35779EPSS 0.9%

    Azure RTOS GUIX Studio Remote Code Execution Vulnerability

  43. 8.8CVE-2022-35777EPSS 2.1%

    Visual Studio Remote Code Execution Vulnerability

  44. 7.2CVE-2022-35772EPSS 2.4%

    Azure Site Recovery Remote Code Execution Vulnerability

  45. 8.1CVE-2022-35767EPSS 1.8%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  46. 8.1CVE-2022-35766EPSS 1.8%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  47. 9.8CVE-2022-34715EPSS 80%

    Windows Network File System Remote Code Execution Vulnerability

  48. 8.1CVE-2022-34714EPSS 2.0%

    Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  49. 7.5CVE-2022-30194EPSS 1.5%

    Windows WebBrowser Control Remote Code Execution Vulnerability

  50. 7.8CVE-2022-30175EPSS 1.2%

    Azure RTOS GUIX Studio Remote Code Execution Vulnerability