Weakness (CWE)
CWE-1112: Incomplete Documentation of Program Execution
Base Incomplete Mapping prohibited
The document does not fully define all mechanisms that are used
to control or influence how product-specific programs are
executed, such as environmental variables, configuration files, registry keys, command-line switches or options, or system settings.
Source: MITRE CWE-1112
2 results · Feed
-
Medium 5.0
Unsafe Deserialization in JsonPickleSerializer Enables Remote Code Execution in run-llama/llama_index
A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle…
-
High 8.1
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong config…