CWE-913.

Synology DiskStation Manager (DSM): Improper control of dynamically-managed code resources vulnerability in WebAPI component…

• Synology DiskStation Manager (DSM)
• Synology Unified Controller (DSMUC)
• CWE-913

GZDoom engine allows arbitrary code execution via ZScript actor states

• gzdoom
• CWE-913

Intel(R) NPU Drivers: Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers…

• Intel(R) NPU Drivers
• CWE-913

Rack has a Possible Information Disclosure Vulnerability

• Information disclosure
• CWE-441

<2.2.20 || >=3.0, <3.1.18 || >=3.2, <3.2.3 · fixed in 2.2.20, 3.1.18, 3.2.3

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

• CWE-913

>=3.0.0, <3.11.3 · fixed in 3.11.3

Duplicate Advisory: The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

• CWE-913

>=3.0.0, <3.11.3 · fixed in 3.11.3

Remote Code Execution via Unauthenticated Configuration Manipulation

• Phoenix Contact CHARX SEC-3150
• Phoenix Contact CHARX SEC-3100
• CWE-913

Eclipse Foundation Eclipse Open VSX Registry: A vulnerability in the Eclipse Open VSX Registry’s automated publishing system could have…

• Eclipse Foundation Eclipse Open VSX Registry
• CWE-653
• CWE-913

Crafter Studio Groovy Sandbox Bypass

• CWE-913

>=4.0.0, <4.3.0 · fixed in 4.3.0

comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes

• comfyanonymous comfyui
• Broken access control
• CWE-913

NASA CryptoLib: In NASA CryptoLib before 1.3.2, the key state is not checked before use…

• NASA CryptoLib
• CWE-913

NASA CryptoLib: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state…

• NASA CryptoLib
• CWE-913

Apache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC

• Apache Software Foundation Apache ShardingSphere ElasticJob-UI
• CWE-913

Sentry SDK Prototype Pollution gadget in JavaScript SDKs

• CWE-913

<7.119.1 || >=8.0.0-alpha.1, <8.33.0 · fixed in 7.119.1, 8.33.0

Langflow Privilege Escalation

• CWE-913

dbt has an implicit override for built-in materializations from installed packages

• Other injection
• SQL injection

>=1.6.0, <1.6.14 || >=1.7.0, <1.7.14 · fixed in 1.6.14, 1.7.14

Remote code execution in pytorch lightning

• Broken access control
• CWE-913

<2.3.3 · fixed in 2.3.3

Electron Code Injection in Logi Tune macOS Application

• Logitech Logi Tune
• CWE-913

Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution

• CWE-20
• CWE-913

>=2.4.0, <2.10.6 || >=2.11.0, <2.11.4 || >=3.0.0, <3.0.3 || >=3.1.0, <3.1.3 || >=3.2.0, <3.2.1 · fixed in 2.10.6, 2.11.4, 3.0.3, 3.1.3, 3.2.1

RPyC's missing security check results in code execution when using numpy.array on the server-side.

• Authentication bypass
• CWE-358

>=4.0.0, <6.0.0 · fixed in 6.0.0

Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

• Unrestricted file upload
• CWE-913

>=6.0.0, <8.11.3 || >=9.0.0, <9.4.1 · fixed in 8.11.3, 9.4.1

Cloud Software Group Citrix Session Recording: Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform…

• Cloud Software Group Citrix Session Recording
• CWE-913

Eclipse Glassfish remote code execution issue

• CWE-20
• CWE-913

>=5.0.0, <7.0.0 · fixed in 7.0.0

TorchServe Pre-Auth Remote Code Execution

• CWE-913

>=0.3.0, <0.8.2 · fixed in 0.8.2

Second Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability

• Silicon Labs Gecko Bootloader
• Memory corruption
• CWE-913

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

• CWE-913

<5.3 || >=6.0a1.dev0, <6.1 · fixed in 5.3, 6.1

SpiceDB's LookupResources may return partial results

• CWE-913

>=1.22.0, <1.22.2 · fixed in 1.22.2

vm2 Sandbox Escape vulnerability

• CWE-913

<3.9.16 · fixed in 3.9.16

vm2 vulnerable to sandbox escape

• CWE-913

<3.9.15 · fixed in 3.9.15

sqlite vulnerable to code execution due to Object coercion

• Broken access control
• CWE-913

>=5.0.0, <5.1.5 · fixed in 5.1.5

JSON Injection in DataHub

• datahub
• CWE-913

An issue was discovered in BACKCLICK Professional 5.9.63.

• Authentication bypass
• CWE-913

vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host

• CWE-913

<3.9.11 · fixed in 3.9.11

Budibase Improper Control of Dynamically-Managed Code Resources vulnerability

• Broken access control
• CWE-913

<1.3.20 · fixed in 1.3.20

CrafterCMS OS Command Injection vulnerability

• Command injection
• CWE-913

>=3.1.0, <3.1.23 · fixed in 3.1.23

CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources

• Command injection
• CWE-913

>=3.1.0, <3.1.23 · fixed in 3.1.23

Perl Code execution in Template Toolkit

• OTRS
• OTRS AG ((OTRS)) Community Edition
• CWE-913

Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources

• CWE-913

>=3.1.0, <3.1.18 · fixed in 3.1.18

Deserialization of Untrusted Data in Flamingo amf-serializer

• Insecure deserialization
• CWE-913

<=2.2.0 · no fixed version yet

GraniteDS Insecure Deserialization

• Insecure deserialization
• CWE-913

<=3.1.1.GA · no fixed version yet

Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

• CWE-913

>=3.0, <3.0.27 || >=3.1, <3.1.7 · fixed in 3.0.27, 3.1.7

Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

• CWE-913

>=3.0, <3.0.27 || >=3.1, <3.1.7 · fixed in 3.0.27, 3.1.7

The Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library

• Thales Sentinel Protection Installer
• CWE-913

Serialization gadgets exploit in jackson-databind

• Insecure deserialization
• CWE-913

>=2.0.0, <2.9.10.8 · fixed in 2.9.10.8

Snakeyaml deserialization vulnerability bypass

• Crafter Software Crafter CMS
• CWE-913

Groovy Sandbox Bypass

• Crafter Software Crafter CMS
• CWE-913

Spring SPEL Expression Language Injection

• Crafter Software Crafter CMS
• CWE-913

Prototype Pollution in config-handler

• CWE-913

<=2.0.3 · no fixed version yet

Header dropping in traefik

• CWE-913

<=1.7.30 · no fixed version yet

Prototype pollution in nestie

• Prototype pollution
• CWE-913

<1.0.1 · fixed in 1.0.1

Improper Control of Dynamically-Managed Code Resources in config-shield

• CWE-913

<0.2.3 · fixed in 0.2.3

Misuse of `Reference` and other transferable APIs may lead to access to nodejs isolate

• CWE-913

<4.0.0 · fixed in 4.0.0

Cisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability

• Cisco WebEx Meetings Server
• CWE-913

Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability

• Cisco Nexus 9000 Series Switches in Standalone NX-OS Mode
• CWE-913

Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability

• Cisco NX-OS Software
• CWE-913