CWE-242 · 11 records

Use of Inherently Dangerous Function

CVEs in this class

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2017-1002157No exploit	modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.redhat · modulemd · CWE-242 pre-auth RCE	Critical9.8	—	2.8%	Jan 10, 2019
36Monitor	CVE-2024-52324No exploit	Ruijie Reyee OS Use of Inherently Dangerous Functionruijienetworks · reyee os · CWE-242 pre-auth RCE	Critical9.2	—	0.6%	Dec 6, 2024
35Monitor	CVE-2022-36310No exploit	Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker airspan · airvelocity 1500 firmware · CWE-242	High8.8	—	1.5%	Aug 15, 2022
35Monitor	CVE-2026-6477No exploit	PostgreSQL libpq lo_* functions let server superuser overwrite client stack memorypostgresql · postgresql · CWE-242 Pre-auth	High8.8	—	0.4%	May 14, 2026
35Monitor	CVE-2025-49215No exploit	A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges otrendmicro · trend micro endpoint encryption · CWE-242 SQL injection	High8.8	—	0.3%	Jun 17, 2025
33Monitor	CVE-2017-0904No exploit	The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-depenprivate address check project · private address check · CWE-242 Pre-auth SSRF	High8.1	—	2.4%	Nov 13, 2017
31Monitor	CVE-2021-42543No exploit	The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, syazeotech · daqfactory · CWE-242	High7.8	—	0.8%	Nov 5, 2021
31Monitor	CVE-2025-1331No exploit	IBM CICS TX code executionibm · cics tx · CWE-242 RCE	High7.8	—	0.2%	May 8, 2025
31Monitor	CVE-2025-1994No exploit	IBM Cognos Command Center code executionibm · cognos command center · CWE-242 RCE	High7.8	—	0.1%	Aug 26, 2025
29Monitor	CVE-2021-40698No exploit	ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypassadobe · coldfusion · CWE-242	High7.4	—	0.5%	Sep 7, 2023
29Monitor	CVE-2026-11980No exploit	Code execution in IBM Desktop Appibm · aspera · CWE-242 RCE	High7.3	—	0.1%	Jul 30, 2026

CVE-2017-1002157
40Plan
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
redhat · modulemdJan 10, 2019
CVE-2024-52324
36Monitor
Ruijie Reyee OS Use of Inherently Dangerous Function
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
ruijienetworks · reyee osDec 6, 2024
CVE-2022-36310
35Monitor
Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker
HighCVSS 8.8No exploitEPSS 1%
airspan · airvelocity 1500 firmwareAug 15, 2022
CVE-2026-6477
35Monitor
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
postgresql · postgresqlMay 14, 2026
CVE-2025-49215
35Monitor
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges o
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
trendmicro · trend micro endpoint encryptionJun 17, 2025
CVE-2017-0904
33Monitor
The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-depen
HighCVSS 8.1No exploitEPSS 2%
- Pre-auth
- SSRF
private address check project · private address checkNov 13, 2017
CVE-2021-42543
31Monitor
The affected application uses specific functions that could be abused through a crafted project file, which could lead to code execution, sy
HighCVSS 7.8No exploitEPSS 0%
azeotech · daqfactoryNov 5, 2021
CVE-2025-1331
31Monitor
IBM CICS TX code execution
HighCVSS 7.8No exploitEPSS 0%
- RCE
ibm · cics txMay 8, 2025
CVE-2025-1994
31Monitor
IBM Cognos Command Center code execution
HighCVSS 7.8No exploitEPSS 0%
- RCE
ibm · cognos command centerAug 26, 2025
CVE-2021-40698
29Monitor
ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass
HighCVSS 7.4No exploitEPSS 0%
adobe · coldfusionSep 7, 2023
CVE-2026-11980
29Monitor
Code execution in IBM Desktop App
HighCVSS 7.3No exploitEPSS 0%
- RCE
ibm · asperaJul 30, 2026

All vulnerability classes