Skip to content
Noroxi

CWE-749 · 180 records

Exposed Dangerous Method or Function

CVEs in this class

180 records

  • CVE-2010-1428
    78This week

    The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09

    HighCVSS 7.5KEVWeaponizedEPSS 61%

    redhat · jboss enterprise application platformApr 28, 2010

  • CVE-2006-1547
    76This week

    ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service v

    HighCVSS 7.5KEVWeaponizedEPSS 54%

    apache · strutsMar 30, 2006

  • CVE-2010-0738
    73This week

    The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 a

    MediumCVSS 5.3KEVWeaponizedEPSS 74%

    redhat · jboss enterprise application platformApr 28, 2010

  • CVE-2018-19322
    62This week

    The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE

    HighCVSS 7.8KEVWeaponizedEPSS 1%

    gigabyte · aorus graphics engineDec 21, 2018

  • CVE-2021-34996
    60This week

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22.

    HighCVSS 8.8No exploitEPSS 82%

    commvault · commcellJan 13, 2022

  • CVE-2018-10931
    59Plan

    It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC.

    CriticalCVSS 9.8Proof of conceptEPSS 68%

    cobbler project · cobblerAug 9, 2018

  • CVE-2023-38124
    53Plan

    Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 59%

    inductiveautomation · ignitionMay 2, 2024

  • CVE-2023-51573
    53Plan

    Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 45%

    voltronicpower · viewpowerApr 1, 2024

  • CVE-2023-27363
    45Plan

    Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability

    HighCVSS 7.8Proof of conceptEPSS 46%

    foxit · pdf editorMay 2, 2024

  • CVE-2020-15623
    42Plan

    This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923.

    CriticalCVSS 9.8No exploitEPSS 8%

    control-webpanel · webpanelJul 28, 2020

  • CVE-2021-42128
    40Plan

    An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via E

    CriticalCVSS 9.8No exploitEPSS 4%

    ivanti · avalancheDec 7, 2021

  • CVE-2023-44414
    40Plan

    D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    dlink · d-view 8May 2, 2024

  • CVE-2021-26614
    40Plan

    IpTime C200 IP camera remote code execution vulnerability

    CriticalCVSS 9.8No exploitEPSS 2%

    iptime · c200 firmwareNov 22, 2021

  • CVE-2019-18342
    40Plan

    A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0).

    CriticalCVSS 9.9No exploitEPSS 2%

    siemens · control center serverDec 12, 2019

  • CVE-2023-40500
    40Plan

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · simple editorMay 2, 2024

  • CVE-2023-40501
    40Plan

    LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    lg · simple editorMay 2, 2024

  • CVE-2020-8212
    39Monitor

    Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10

    CriticalCVSS 9.8No exploitEPSS 1%

    citrix · xenmobile serverAug 17, 2020

  • CVE-2023-51574
    39Monitor

    Voltronic Power ViewPower updateManagerPassword Exposed Dangerous Method Authentication Bypass Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51581
    39Monitor

    Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51575
    39Monitor

    Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51582
    39Monitor

    Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-51583
    39Monitor

    Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    voltronicpower · viewpowerMay 2, 2024

  • CVE-2023-50422
    39Monitor

    Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)

    CriticalCVSS 9.8No exploitEPSS 1%

    sap · cloud-security-services-integration-libraryDec 11, 2023

  • CVE-2023-40150
    39Monitor

    Softneta MedDream PACS Exposed Dangerous Method or Function

    CriticalCVSS 9.8No exploitEPSS 1%

    softneta · meddream pacsSep 11, 2023

  • CVE-2026-30957
    39Monitor

    OneUptime Synthetic Monitor RCE via exposed Playwright browser object

    CriticalCVSS 9.9No exploitEPSS 1%

    hackerbay · oneuptimeMar 10, 2026

All vulnerability classes