CWE-242
11 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 11Published CVEs11 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical9 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-11980
Code execution in IBM Desktop App
IBM · Aspera Desktop App
High7.3 - CVE-2026-6477
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
PostgreSQL
High8.8 - CVE-2025-1994
IBM Cognos Command Center code execution
IBM · Cognos Command Center
High7.8 - CVE-2025-49215
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…
Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server
High8.8 - CVE-2025-1331
IBM CICS TX code execution
IBM · CICS TX Standard
High7.8 - CVE-2024-52324
Ruijie Reyee OS Use of Inherently Dangerous Function
Ruijie · Reyee OS
Critical9.2 - CVE-2021-40698
ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass
Adobe · ColdFusion
High7.4 - CVE-2022-36310
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write…
Airspan · AirVelocity
High8.8 - CVE-2021-42543
AzeoTech DAQFactory
AzeoTech · DAQFactory
High7.8 - CVE-2017-1002157
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
Fedora Modularity · modulemd
Critical9.8