CWE-242 · Memory Corruption
Use of Inherently Dangerous Function
11CVEs
SortMost likely exploited
11 CVEs with CWE-242 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-1002157modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.Fedora Modularity · modulemd · 2019-01-10 | – | 2.9% | 2019-01-10 |
| CVE-2017-0904The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for…jtdowney · private_address_check ruby gem · 2017-11-13 | – | 2.4% | 2017-11-13 |
| CVE-2022-36310Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute co…Airspan · AirVelocity · 2022-08-16 | – | 1.6% | 2022-08-16 |
| CVE-2021-42543AzeoTech DAQFactoryAzeoTech · DAQFactory · CVSS 7.8 · 2021-11-05 | 7.8 | 0.8% | 2021-11-05 |
| CVE-2024-52324Ruijie Reyee OS Use of Inherently Dangerous FunctionRuijie · Reyee OS · CVSS 9.8 · 2024-12-06 | 9.8 | 0.7% | 2024-12-06 |
| CVE-2021-40698ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypassAdobe · ColdFusion · CVSS 7.4 · 2023-09-07 | 7.4 | 0.6% | 2023-09-07 |
| CVE-2026-6477PostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryPostgresql · PostgreSQL · CVSS 8.8 · 2026-05-14 | 8.8 | 0.5% | 2026-05-14 |
| CVE-2025-49215A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note:…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 8.8 · 2025-06-17 | 8.8 | 0.3% | 2025-06-17 |
| CVE-2025-1331IBM CICS TX code executionIBM · CICS TX Standard · CVSS 7.8 · 2025-05-08 | 7.8 | 0.3% | 2025-05-08 |
| CVE-2026-11980Code execution in IBM Desktop AppIBM · Aspera Desktop App · CVSS 7.3 · 2026-07-30 | 7.3 | 0.2% | 2026-07-30 |
| CVE-2025-1994IBM Cognos Command Center code executionIBM · Cognos Command Center · CVSS 7.8 · 2025-08-26 | 7.8 | 0.2% | 2025-08-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.