cve.bz

CWE-94: Improper Control of Generation of Code (Code Injection), page 96

Filter

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

What the weakness is: CWE-94 at MITRE

Related attack patterns (CAPEC): 3
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High
  • CAPEC-77 Manipulating User-Controlled Variables Likelihood: High · Severity: Very High
  • CAPEC-242 Code Injection Likelihood: High · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-94, as MITRE names them. Credits.

Ask an AI about CWE-94

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-94: Improper Control of Generation of Code and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/94.html and https://cve.bz/cve/cwe/94?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 3.3CVE-2022-33725EPSS 0.1%

    A vulnerability using PendingIntent in Knox VPN prior to SMR Aug-2022 Release 1 allows attackers to access content providers with system privilege.

  2. 5.5CVE-2022-33721EPSS 0.1%

    A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege.

  3. 8.8CVE-2022-2636EPSS 1.4%

    Improper Control of Generation of Code ('Code Injection') in GitHub repository hestiacp/hestiacp prior to 1.6.6.

  4. 7.8CVE-2022-37396EPSS 0.2%

    In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution

  5. 7.2CVE-2022-34625EPSS 3.0%

    Mealie1.0.0beta3 was discovered to contain a Server-Side Template Injection vulnerability, which allows attackers to execute arbitrary code via a crafted Jinja2 template.

  6. 7.2CVE-2022-36799EPSS 47%

    This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of Atlassian Jira Server and Data Center allowed remote attackers with system admin…

  7. 9.8CVE-2022-30083EPSS 1.2%

    EllieGrid Android Application version 3.4.1 is vulnerable to Code Injection. The application appears to evaluate user input as code (remote).

  8. 9.8CVE-2021-22646EPSS 1.4%

    The “ipk” package containing the configuration created by TWinSoft can be uploaded, extracted, and executed in Ovarro TBox, allowing malicious code execution.

  9. 7.8CVE-2022-37009EPSS 0.3%

    In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

  10. 9.8CVE-2022-35649EPSS 8.6%

    The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code. An omitted execution parameter results in a remote code execution risk for sites running GhostScript versions older than 9.50. Suc…

  11. 9.8CVE-2022-25759EPSS 12%

    The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.

  12. 9.8CVE-2022-31161ExploitEPSS 29%

    Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the…

  13. 9.8CVE-2022-32417EPSS 35%

    PbootCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the function parserIfLabel at function.php.

  14. 8.8CVE-2022-34821EPSS 2.4%

    A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2), SCALANCE M804PB (6GK5804-0AP00-2AA2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2), SCALANCE M8…

  15. 8.0CVE-2022-34663EPSS 0.9%

    A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM …

  16. 7.2CVE-2015-3173EPSS 3.3%

    custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution.

  17. 7.2CVE-2022-2073EPSS 11%

    Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

  18. 8.8CVE-2021-40553EPSS 2.3%

    piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.

  19. 9.8CVE-2017-20099EPSS 1.2%

    A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.

  20. 9.8CVE-2017-20095EPSS 0.9%

    A vulnerability classified as critical was found in Simple Ads Manager Plugin. This vulnerability affects unknown code. The manipulation leads to code injection. The attack can be initiated remotely.

  21. 7.5CVE-2017-20086EPSS 1.1%

    A vulnerability, which was classified as critical, was found in VaultPress Plugin 1.8.4. This affects an unknown part. The manipulation leads to code injection. It is possible to initiate the attack remotely.

  22. 8.8CVE-2017-20064EPSS 1.1%

    A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /designer/add/layout. The manipulation leads to code injection. The attack can be …

  23. 8.8CVE-2021-41402EPSS 1.4%

    flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.

  24. 9.8CVE-2022-0885ExploitEPSS 9.4%

    The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.

  25. 7.8CVE-2022-2054EPSS 0.5%

    Code Injection in GitHub repository nuitka/nuitka prior to 0.9.

  26. 9.8CVE-2021-41749ExploitEPSS 17%

    In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.

  27. 7.8CVE-2022-24429EPSS 0.9%

    The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file.

  28. 5.4CVE-2022-2014EPSS 0.7%

    Code Injection in GitHub repository jgraph/drawio prior to 19.0.2.

  29. 9.8CVE-2022-21122EPSS 2.7%

    The package metacalc before 0.0.2 are vulnerable to Arbitrary Code Execution when it exposes JavaScript's Math class to the v8 context. As the Math class is exposed to user-land, it can be used to get access to JavaScript's Function constr…

  30. 9.8CVE-2022-21831EPSS 3.1%

    A code injection vulnerability exists in the Active Storage >= v5.2.0 that could allow an attacker to execute code via image_processing arguments.

  31. 8.8CVE-2022-29221EPSS 4.9%

    Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to versions 3.1.45 and 4.1.1, template authors could inject php code by choosing a malicious {block} name or {include…

  32. 7.8CVE-2022-29216EPSS 0.5%

    TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, TensorFlow's `saved_model_cli` tool is vulnerable to a code injection. This can be used to open a reverse shell. This code path w…

  33. 9.8CVE-2021-27446EPSS 3.0%

    The Weintek cMT product line is vulnerable to code injection, which may allow an unauthenticated remote attacker to execute commands with root privileges on the operation system.

  34. 6.5CVE-2022-0578EPSS 0.9%

    Code Injection in GitHub repository publify/publify prior to 9.2.8.

  35. 9.8CVE-2022-29307EPSS 18%

    IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.

  36. 8.8CVE-2021-42651EPSS 1.7%

    A Server Side Template Injection (SSTI) vulnerability in Pentest-Collaboration-Framework v1.0.8 allows an authenticated remote attacker to execute arbitrary code through /project/PROJECTNAME/reports/.

  37. 8.8CVE-2022-23332EPSS 5.1%

    Command injection vulnerability in Manual Ping Form (Web UI) in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field.

  38. 7.2CVE-2022-29171EPSS 1.4%

    Sourcegraph is a fast and featureful code search and navigation engine. Versions before 3.38.0 are vulnerable to Remote Code Execution in the gitserver service. The Gitolite code host integration with Phabricator allows Sourcegraph site ad…

  39. 9.9CVE-2022-24817EPSS 1.1%

    Flux2 is an open and extensible continuous delivery solution for Kubernetes. Flux2 versions between 0.1.0 and 0.29.0, helm-controller 0.1.0 to v0.19.0, and kustomize-controller 0.1.0 to v0.23.0 are vulnerable to Code Injection via maliciou…

  40. 9.6CVE-2022-1575EPSS 2.4%

    Arbitrary Code Execution through Sanitizer Bypass in GitHub repository jgraph/drawio prior to 18.0.0. - Arbitrary (remote) code execution in the desktop app. - Stored XSS in the web app.

  41. 7.7CVE-2022-29821EPSS 0.2%

    In JetBrains Rider before 2022.1 local code execution via links in ReSharper Quick Documentation was possible

  42. 7.7CVE-2022-29819EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2022.1 local code execution via links in Quick Documentation was possible

  43. 6.7CVE-2022-29815EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2022.1 local code execution via workspace settings was possible

  44. 7.7CVE-2022-29814EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2022.1 local code execution via HTML descriptions in custom JSON schemas was possible

  45. 6.7CVE-2022-29813EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2022.1 local code execution via custom Pandoc path was possible

  46. 7.8CVE-2022-24735EPSS 2.3%

    Redis is an in-memory database that persists on disk. By exploiting weaknesses in the Lua script execution environment, an attacker with access to Redis prior to version 7.0.0 or 6.2.7 can inject Lua code that will execute with the (potent…

  47. 9.8CVE-2022-24881EPSS 3.2%

    Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens beca…

  48. 9.8CVE-2022-29078ExploitEPSS 33%

    The ejs (aka Embedded JavaScript templates) package 3.1.6 for Node.js allows server-side template injection in settings[view options][outputFunctionName]. This is parsed as an internal option, and overwrites the outputFunctionName option w…

  49. 7.2CVE-2022-0661EPSS 40%

    The Ad Injection WordPress plugin through 1.2.0.19 does not properly sanitize the body of the adverts injected into the pages, allowing a high privileged user (Admin+) to inject arbitrary HTML or javascript even with unfiltered_html disall…

  50. 10.0CVE-2022-24816KEVExploitEPSS >99.9%

    JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing Jiffle script to be provided via network request can lead to a Remote Code Execution as the Jiffle script is compiled into Java c…