cwe-94
Safeguard articles tagged "cwe-94" — guides, analysis, and best practices for software supply chain and application security.
73 articles
CVE-2022-22965: Spring Framework JDK 9+ Remote Code Execution Vulnerability
CVE-2022-22965 affects VMware Spring Framework and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-04-04.
CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
CVE-2022-22954 affects VMware Workspace ONE Access and Identity Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-04-14.
CVE-2022-22947: VMware Spring Cloud Gateway Code Injection Vulnerability
CVE-2022-22947 affects VMware Spring Cloud Gateway and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-05-16.
CVE-2014-4148: Microsoft Windows Remote Code Execution Vulnerability
CVE-2014-4148 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-05-25.
CVE-2009-0557: Microsoft Office Object Record Corruption Vulnerability
CVE-2009-0557 affects Microsoft Office and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-08.
CVE-2009-1862: Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability
CVE-2009-1862 affects Adobe Acrobat and Reader, Flash Player and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-08.
CVE-2022-22963: VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVE-2022-22963 affects VMware Tanzu Spring Cloud and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-25.
CVE-2022-3236: Sophos Firewall Code Injection Vulnerability
CVE-2022-3236 affects Sophos Firewall and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-09-23.
CVE-2022-41223: Mitel MiVoice Connect Code Injection Vulnerability
CVE-2022-41223 affects Mitel MiVoice Connect and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-02-21.
CVE-2021-39144: XStream Remote Code Execution Vulnerability
CVE-2021-39144 affects XStream XStream and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-03-10.
CVE-2017-7494: Samba Remote Code Execution Vulnerability
CVE-2017-7494 affects Samba Samba and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-03-30.
CVE-2013-3163: Microsoft Internet Explorer Memory Corruption Vulnerability
CVE-2013-3163 affects Microsoft Internet Explorer and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-03-30.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.