CWE-94: Improper Control of Generation of Code
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Also known as Code Injection.
A kind of CWE-74 Injection.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedAn issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the...9.8 Critical
- No product listedAgno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection....9.8 Critical
- giteaGitea: Remote Code Execution via diffpatch Git Hook Installation9.8 Critical
- andyyyy64 whichllmwhichllm < 0.5.16 Code Injection via run and snippet commands8.6 High
- unknown podsPods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback7.2 High
- sasaki nobuyuki corvusskkCorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on...8.4 High
- No product listedIn AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering...9.8 Critical
- No product listedJeecgBoot v3.9.2 is vulnerable to Remote command execution. The CodeNode component of the AI Flow...9.8 Critical
- No product listedA zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component...9.8 Critical
- oscal-compass compliance-trestleTrestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)7.8 High
- oscal-compass compliance-trestleTrestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data7.8 High
- code-projects online shopping systemcode-projects Online Shopping System sumit_form.php cross site scripting5.3 Medium
- nvidia nemoclawNVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local...7.0 High
- google chromeCode injection in Bisection in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to...6.5 Medium
mcp-contextforge-gatewayPyPImcp-contextforge-gateway has Server-Side Template Injection (SSTI) leading to Remote Code Execution in `PromptService._render_template` via unsandboxed Jinja2 EnvironmentNo score- qwed-ai qwed-verificationQWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`8.8 High
- qwed-ai qwed-mcpQWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input9.8 Critical
- watchguard agentWatchGuard Agent path traversal allows unauthenticated remote code execution9.4 Critical
- apache hiveApache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths9.8 Critical
- cleverbrush deep, framework +1 morecleverbrush framework/deep deepExtend.ts deepExtend prototype pollution6.9 Medium
- gitpython-developers gitpythonGitPython before 3.1.59 Remote Code Execution via Config Injection9.3 Critical
- vrana adminerAdminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO8.6 High
- ibm mcp-context-forgeMCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server10.0 Critical
- combodo itopCombodo iTop: PHP Object Injection Leading to Remote Code Execution on user preferences8.7 High
- combodo itopCombodo iTop: Remote code execution using external auth variable value9.4 Critical
- azuracastAzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass8.7 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpmbuild gettarspec() crafted tar member name → macro injection7.0 High
- xorbits inferenceXinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders8.7 High
- piwigoPiwigo Public Authentication cross site scripting2.3 Low
- ractivejs ractiveractivejs ractive Keypath Ractive#set prototype pollution6.9 Medium
- rapid7 velociraptorVelociraptor Analyst overwrites live built-in artifacts through verify()8.9 High
- alibaba-fusion nextalibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution6.9 Medium
- rexrainbow phaser3-rex-notesrexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution5.3 Medium
- No product listedjQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution6.9 Medium
- provectus kafka-uiprovectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection5.3 Medium
libtiffAlmaLinux,tiffAlpaquita,libtiff-debuginfoRed Hat +6 more +8 moreAn issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute...9.8 Critical- No product listedIn D-Link DI-8100G 17.12.20A1, the flag parameter in msp_info can be exploited to execute...8.1 High
- sourcecodester stock management systemSourceCodester Stock Management System getOrderReport.php cross site scripting5.3 Medium
- sourcecodester stock management systemSourceCodester Stock Management System printOrder.php cross site scripting5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting5.3 Medium
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting5.3 Medium
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.29.5 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.210.0 Critical
- collizo4sky kk star ratings – rate post & collect user feedbackskk Star Ratings <= 5.4.10.3 - Unauthenticated Arbitrary Shortcode Execution via 'payload' Parameter5.3 Medium
- unknown forminator formsForminator Forms < 1.57.0.5 - Admin+ Network-Wide RCE via Hub Connector API Key on Multisite7.2 High
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- jsonata-js jsonataJSONata: Arbitrary Code Execution via crafted JSONata expressions9.3 Critical
- phalcon cphalconPhalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)9.2 Critical
- Show moreLoading…