Advisories · Weakness
Code injection.
Untrusted input evaluated as code: eval, templates, expression languages. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability
- Marketing Fire Widget Options
- Code injection
- CVSS 6.5 Medium
Ad Inserter <= 2.8.19 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Parameter
- spacetime Ad Inserter – Ad Manager & AdSense Ads
- Code injection
- CVSS 6.5 Medium
GeoDirectory <= 2.8.198 - Unauthenticated Shortcode Injection via 'pagination_info' Parameter
- paoltaia GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
- Code injection
- CVSS 9.3 CriticalCritical · CVSS 9+
pybars3 through 0.9.7 and pybars4 through 0.9.13 Code Injection via Bracketed Path Segments
- wbond pybars3
- up9inc pybars4
- Code injection
- CVSS 6.9 Medium
My Calendar 3.8.8 before 3.8.11 Unauthenticated Shortcode Injection via mcs Parameter
- joedolson My Calendar - Accessible Event Manager
- Code injection
- CVSS 6.6 Medium
Chamilo LMS: Conditional PHP execution through vendored QuickForm eval
- chamilo-lms
- Code injection
- CVSS 8.5 High
MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()
- MONAI
- Code injection
- CVSS 5.4 Medium
Linked Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-200
- Drupal Linked Field
- Code injection
- CVSS 5.4 Medium
Inline Formatter Field - Moderately critical - Server-side template injection - SA-CONTRIB-2026-203
- Drupal Inline Formatter Field
- Code injection
-
Entity List - Critical - Remote code execution - SA-CONTRIB-2026-218
- Drupal Entity List
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in ExcelFmt
- Code injection
- CVSS 9.0 CriticalCritical · CVSS 9+
SOCFortress CoPilot: Stored case-report template injection permits backend code execution
- socfortress CoPilot
- Code injection
- Broken access control
- CVSS 8.7 High
Frappe Framework before 15.111.0 and 16.x before 16.21.0 Server-Side Template Injection via Message Fields
- frappe
- Code injection
- CVSS 5.3 Medium
Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for
- unclecode crawl4ai
- Code injection
- CVSS 6.6 Medium
Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server
- Progress Software WS_FTP Server
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability
- Ajax Load More AjaxLoadMore Cache
- Code injection
- CVSS 6.5 Medium
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 8.8 High
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 8.8 High
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 8.8 High
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 8.8 High
Langflow OSS is affected by multiple vulnerabilities
- IBM Langflow OSS
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+
Agno through 3.1.11 Code Execution via PandasTools Unsafe Reflection
- agno
- Code injection
- CVSS 8.7 High
oapi-codegen 2.0.0 before 2.8.1 Code Injection via Non-String Enum Values
- oapi-codegen
- Code injection
- CVSS 7.7 High
oapi-codegen 2.5.0 before 2.8.1 Code Injection via servers[].x-go-name Extension
- oapi-codegen
- Code injection
- CVSS 7.2 High
Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block
- Contact Form by Supsystic
- Code injection
- CVSS 7.1 High
nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed
- nvm
- Command injection
- Code injection
- CVSS 7.8 High
An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component
- Code injection
- CVSS 7.8 High
An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.
- Code injection
- CVSS 5.1 Medium
configuroweb inventariobasico Add Product addlist.php cross site scripting
- configuroweb inventariobasico
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.2 High
OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional)
- OpenCATS
- Other injection
- Code injection
- CVSS 10.0 CriticalCritical · CVSS 9+
AVideo-Encoder: unauthenticated installer PHP code injection
- WWBN AVideo-Encoder
- Code injection
- CVSS 5.3 Medium
Seroval: Code injection through a typed array's own constructor property
- Cross-site scripting (XSS)
- Code injection
>=1.6.0, <1.6.11 · fixed in 1.6.11
GHSA-f86p-h4j2-7qgj · CVE-2026-116583 - CVSS 7.5 High
Bricks Theme Unauthenticated Dynamic Data Tag Injection via query_result
- Bricks Theme
- Code injection
- CVSS 8.6 High
MONAI 1.2.0 before 1.6.1 Code Execution via bundle configs/logging.conf
- MONAI
- Code injection
- CVSS 7.8 High
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
- Ultralytics
- Code injection
- CVSS 7.8 High
Ultralytics parse_model Code Injection Remote Code Execution Vulnerability
- Ultralytics
- Code injection
- CVSS 7.8 High
Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability
- Ultralytics
- Code injection
- CVSS 8.8 High
Code injection in Jenkins
- Jenkins
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
HCL BigFix AEX is affected by multiple security vulnerabilities.
- HCL Software BigFix AEX
- Command injection
- Code injection
- CVSS 4.2 Medium
Code injection in Dell iDRAC Service Module for Windows and others
- Dell iDRAC Service Module for Windows
- Dell iDRAC Service Module for Linux
- Code injection
- CVSS 4.9 Medium
Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text Block
- Smart Popup by Supsystic
- Code injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Code injection in EagleCloud Aquila on-premises version
- EagleCloud Aquila
- Code injection
- CVSS 9.1 CriticalCritical · CVSS 9+
GRR vulnerable to Remote Code Execution Via PHP Code Injection
- JeromeDevome GRR
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- Code injection
>=3.12.0rc0, <3.17.0 · fixed in 3.17.0
GHSA-26p8-2jq9-3vq9 · CVE-2026-116692 - CVSS 4.8 Medium
reduxjs redux-devtools Remotedev Server evalAction code injection
- reduxjs redux-devtools
- Other injection
- Code injection
- CVSS 9.9 CriticalCritical · CVSS 9+
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Campaign Classic
- Code injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- Adobe Connect Desktop App
- Adobe Connect Android Mobile App
- Code injection
- CVSS 9.2 CriticalCritical · CVSS 9+
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
- Code injection
- CWE-829
>=0.7.3, <0.31.0 · fixed in 0.31.0
GHSA-h3rc-6mm3-gc2m · CVE-2026-114053 - CVSS 5.1 Medium
Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting
- Saruf-Ratul HR-Payroll-Management-System
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting
- MD-MAFUJUL-HASAN Online-Payroll-Management-System
- Cross-site scripting (XSS)
- Code injection
- CVSS 9.8 CriticalCritical · CVSS 9+
Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are vulnerable to Remote Code Execution (RCE) via UPnP root descrip…
- Code injection
- CVSS 8.7 High
OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template
- openpanel
- Code injection
- CVSS 4.8 Medium
Argilla TextField.vue cross site scripting
- Argilla
- Cross-site scripting (XSS)
- Code injection
- CVSS 4.8 Medium
Argilla Sandbox.vue cross site scripting
- Argilla
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting
- Argilla
- Cross-site scripting (XSS)
- Code injection