CWE-242

11 CVEs classified under CWE-242. Browse by severity and year.

Top CVEs for CWE-242
CVESeverityScorePublishedSummary
CVE-2024-52324Critical9.82024-12-06Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT m…
CVE-2017-1002157Critical9.82019-01-10modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
CVE-2026-6477High8.82026-05-14Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows…
CVE-2025-49215High8.82025-06-17A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installa…
CVE-2022-36310High8.82022-08-16Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abi…
CVE-2017-0904High8.12017-11-13The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not…
CVE-2025-1994High7.82025-08-26IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFo…
CVE-2025-1331High7.82025-05-08IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use…
CVE-2021-42543High7.82021-11-05The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and sy…
CVE-2021-40698High7.42023-09-07ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that ca…
CVE-2026-11980High7.32026-07-30IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.
All CVEs classified under CWE-242 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-11980High7.32026-07-30IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.
CVE-2026-6477High8.82026-05-14Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows…
CVE-2025-1994High7.82025-08-26IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFo…
CVE-2025-49215High8.82025-06-17A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installa…
CVE-2025-1331High7.82025-05-08IBM CICS TX Standard 11.1 and IBM CICS TX Advanced 10.1 and 11.1 could allow a local user to execute arbitrary code on the system due to the use of unsafe use…
CVE-2024-52324Critical9.82024-12-06Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x uses an inherently dangerous function which could allow an attacker to send a malicious MQTT m…
CVE-2021-40698High7.42023-09-07ColdFusion version 2021 update 1 (and earlier) and versions 2018.10 (and earlier) are impacted by an Use of Inherently Dangerous Function vulnerability that ca…
CVE-2022-36310High8.82022-08-16Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abi…
CVE-2021-42543High7.82021-11-05The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, system reboot, and sy…
CVE-2017-1002157Critical9.82019-01-10modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
CVE-2017-0904High8.12017-11-13The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not…