CWE-242: Use of Inherently Dangerous Function
The product calls a function that can never be guaranteed to work safely, regardless of how it is used.
A kind of CWE-1177 Use of Prohibited Code.
From the CWE List. © The MITRE Corporation.
Newest
- ibm aspera, aspera desktop app +1 more Code execution in IBM Desktop App 7.3 High
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 more PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory 8.8 High
- ibm cognos command center IBM Cognos Command Center code execution 7.8 High
- trendmicro trend micro endpoint encryption, trend micro, inc. micro endpoint encryption policy server +1 more A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could... 8.8 High
- ibm cics tx advanced, cics tx standard, cics tx +2 more IBM CICS TX code execution 7.8 High
- ruijie reyee os Ruijie Reyee OS Use of Inherently Dangerous Function 9.2 Critical
- adobe coldfusion ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass 7.4 High
- airspan airvelocity, airvelocity 1500 firmware +1 more Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute commands as root on the… 8.8 High
- azeotech daqfactory AzeoTech DAQFactory 7.8 High
- fedora modularity modulemd modulemd uses an unsafe function for processing externally provided data 9.8 Critical
- hackerone private address check ruby gem, private address check project address check +1 more private_address_check vulnerable to bypass of Resolv.getaddresses method 8.1 High