Incomplete Documentation of Program Execution
CWE-1112
The document does not fully define all mechanisms that are used to control or influence how product-specific programs are executed, such as environmental variables, configuration files, registry keys, command-line switches or options, or system settings.
We track 2 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 7.3.
Latest Incomplete Documentation of Program Execution vulnerabilities
- 7.5 High severity
run-llama/llama_index: Incomplete Documentation of Program Execution
A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle
- 7.1 High severity
BIS: Incomplete Documentation of Program Execution
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network