CWE-913: Improper Control of Dynamically-Managed Code Resources
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- postgresql, fedoraproject fedora, redhat enterprise linux +2 moreA vulnerability found in postgresql. On this security issue an attack requires permission to...8.0 High
- palantir foundry multipassThe Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.5.3 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio7.6 High
- ec-cube, ec-cube co.,ltd. 3 series and ec-cube 4 series +1 moreEC-CUBE improperly handles HTTP Host header values5.3 Medium
- linux kernel, netapp baseboard management controller firmware, h300e firmware +6 more +8 moreIn the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they...7.8 High
- thales sentinel protection installerThe Sentinel Protection Installer 7.7.0 does not properly restrict loading Dynamic Link Library6.5 Medium
- crafter software cms, craftercms crafter cms +1 moreSnakeyaml deserialization vulnerability bypass4.2 Medium
- crafter software cms, craftercms crafter cms +1 moreGroovy Sandbox Bypass4.2 Medium
- crafter software cms, craftercms crafter cms +1 moreSpring SPEL Expression Language Injection4.2 Medium
- config-handler project config-handlerPrototype Pollution6.5 Medium
- traefikDrop Headers via Malicious Connection Header4.8 Medium
- huawei emui, magic ui +1 moreThere is an Improper Control of Dynamically Managing Code Resources Vulnerability in Huawei...9.8 Critical
- nestie project nestiePrototype pollution in nestie9.8 Critical
- xfce thunarAn issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a...9.8 Critical
- adaltas mixmePrototype Pollution in mixme9.1 Critical
- isolated-vm project isolated-vmMisuse of `Reference` and other transferable APIs may lead to access to nodejs isolate8.0 High
- terra-master tosTerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root...9.8 Critical
- godaddy node-config-shieldImproper Control of Dynamically-Managed Code Resources in config-shield5.3 Medium
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databind8.1 High
- cisco webex meetings serverCisco Webex Meetings and Cisco Webex Meetings Server Ghost Join Vulnerability6.5 Medium
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via deep inspection of FreeMarker template exposed objects.4.2 Medium
- crafter software cms, craftercms studio +1 moreAuthenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.4.2 Medium
- brocade fabric os, broadcom fabric operating system +1 moreA vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2...5.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1709 +30 more +32 moreWindows Graphics Component Information Disclosure Vulnerability6.5 Medium
- hcltechsw hcl verse"HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a...4.4 Medium
- atlassian confluence, confluence server +1 moreThere was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in...6.5 Medium
- cisco nexus 9000 series switches in standalone nx-os mode, nx-os +1 moreCisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service Vulnerability7.4 High
- cisco nx-os software, nx-os +1 moreCisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability7.4 High
- metinfoIn Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including...6.1 Medium
- exadel flamingo, flamingo amf-serializer +1 moreThe implementation of Action Message Format (AMF3) deserializers in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes due to improper code control9.8 Critical
- graniteds, flarum framework +1 moreThe implementation of Action Message Format (AMF3) deserializers in GraniteDS, version 3.1.1.GA, may allow instantiation of arbitrary classes due to improper code control8.1 High
- imagemagick, opensuse leap, opensuse +4 more +6 moredistribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows...9.8 Critical
- githubGitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values...7.5 High
- exv2 content management systemVariable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote...9.8 Critical