CWE-676 · Misconfiguration and Insecure Design
Use of Potentially Dangerous Function
10CVEs
SortMost likely exploited
10 CVEs with CWE-676 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-27474Rockwell Automation FactoryTalk AssetCentre Use of Potentially Dangerous FunctionRockwell Automation · FactoryTalk AssetCentre · CVSS 10 · 2022-03-23 | 10.0 | 1.6% | 2022-03-23 |
| CVE-2022-39063When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets…Open5GS · Open5GS · 2022-09-16 | – | 1.2% | 2022-09-16 |
| CVE-2025-14601vsDesk Task Scheduler OS Command InjectionvsDesk · vsDesk · CVSS 8.6 · 2026-08-20 | 8.6 | 1.1% | 2026-08-20 |
| CVE-2022-4499The strcmp function in TP-Link routers, Archer C5 and WR710N-V1, used for checking credentials in httpd, is susceptible to a side-channel attack.TP-Link · WR710N · CVSS 7.5 · 2023-01-11 | 7.5 | 0.8% | 2023-01-11 |
| CVE-2026-14501Use of Potentially Dangerous Functionthat in IBM Db2 Genius HubIBM · Db2 Genius Hub · CVSS 4.3 · 2026-07-17 | 4.3 | 0.5% | 2026-07-17 |
| CVE-2024-38434Unitronics Vision PLC - CWE-676: Use of Potentially Dangerous FunctionUnitronics · Vision PLC · CVSS 6.5 · 2024-07-21 | 6.5 | 0.4% | 2024-07-21 |
| CVE-2025-67604A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyz…Fortinet · FortiAnalyzer · CVSS 5.2 · 2026-05-12 | 5.2 | 0.4% | 2026-05-12 |
| CVE-2024-50307Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2. If a user clicks a specially crafted link in the application,…kubell Co., Ltd. · Chatwork Desktop Application (Windows) · CVSS 5.5 · 2024-10-28 | 5.5 | 0.3% | 2024-10-28 |
| CVE-2025-65117AVEVA Process Optimization Use of Potentially Dangerous FunctionAVEVA · Process Optimization · CVSS 7.4 · 2026-01-16 | 7.4 | 0.2% | 2026-01-16 |
| CVE-2024-37387Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is exploited, files in the PC where the product is installed may be alte…RICOH COMPANY, LTD. · Ricoh Streamline NX PC Client · CVSS 4 · 2024-06-19 | 4.0 | 0.2% | 2024-06-19 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.