Skip to content

CWE-676 · weakness in Misconfiguration and Insecure Design

Use of Potentially Dangerous Function

10 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous FunctionCVE-2021-27474Rockwell Automation · CVSS 10 · 1.6% likely

    Rockwell Automation

  2. When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets…CVE-2022-39063Open5GS · 1.2% likely

    Open5gs

  3. vsDesk Task Scheduler OS Command InjectionCVE-2025-14601vsDesk · CVSS 8.6 · 1.1% likely

    vsDesk

  4. The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.CVE-2022-4499TP-Link · CVSS 7.5 · 0.8% likely

    TP-Link

  5. Use of Potentially Dangerous Functionthat in IBM Db2 Genius HubCVE-2026-14501IBM · CVSS 4.3 · 0.5% likely

    IBM

  6. Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous FunctionCVE-2024-38434Unitronics · CVSS 6.5 · 0.4% likely

    Unitronics

  7. A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyz…CVE-2025-67604Fortinet · CVSS 5.2 · 0.4% likely

    Fortinet

  8. Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application,…CVE-2024-50307kubell Co., Ltd. · CVSS 5.5 · 0.3% likely
  9. AVEVA Process Optimization Use of Potentially Dangerous FunctionCVE-2025-65117AVEVA · CVSS 7.4 · 0.2% likely

    AVEVA

  10. Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be alte…CVE-2024-37387RICOH COMPANY, LTD. · CVSS 4 · 0.2% likely

    Ricoh Company, Ltd.

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in