CWE-913: Improper Control of Dynamically-Managed Code Resources
The product does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- n8nn8n Vulnerable to Remote Code Execution via Expression Injection10.0 Critical
- samunatsu halobotSamuNatsu HaloBot Inter-plugin API index.js html_renderer dynamically-managed code resources5.3 Medium
- ivanti endpoint managerImproper control of dynamically managed code resources in Ivanti Endpoint Manager prior to...8.8 High
- google cloud apigee hybrid javacallout policyImproper Sandboxing in Google Apigee's JavaCallout Policy Allows for Remote Code Execution8.7 High
- youlai youlai-mallyoulaitech youlai-mall orders improper control of dynamically-identified variables5.3 Medium
- youlai youlai-mallyoulaitech youlai-mall addresses deleteAddress improper control of dynamically-identified variables5.3 Medium
- synology diskstation manager (dsm), diskstation manager, unified controller (dsmuc) +1 more +3 moreImproper control of dynamically-managed code resources vulnerability in WebAPI component in...4.3 Medium
- zdoom gzdoomGZDoom engine allows arbitrary code execution via ZScript actor states7.8 High
firmware-nonfreeDebianImproper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring...5.1 Medium- rackRack has Possible Information Disclosure Vulnerability5.8 Medium
- google kerasArbitary Code execution in Keras load_model()7.3 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +5 more +7 moreRemote Code Execution via Unauthenticated Configuration Manipulation9.8 Critical
- eclipse open vsx, eclipse foundation open vsx registry, openvsx +2 moreOn open-vsx.org http://open-vsx.org/ it was possible to run an arbitrary build scripts for auto...7.6 High
- craftercmsImproper Control of Dynamically-Managed Code Resources in Crafter Studio7.3 High
- comfyanonymous comfyuicomfyanonymous comfyui utils.py set_attr dynamically-determined object attributes2.3 Low
- nasa cryptolibIn NASA CryptoLib before 1.3.2, the key state is not checked before use, potentially leading to...3.5 Low
- nasa cryptolibNASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use,...4.9 Medium
- composio, composiohq composiohq/composio +1 moreUnsafe eval usage in composiohq/composio7.2 High
- apache shardingsphere elasticjob-uiApache ShardingSphere ElasticJob-UI allows RCE via event trace data source JDBC8.5 High
@rootio/sentry__browserRoot,@sentry/browsernpm +1 moreSentry SDK Prototype Pollution gadget in JavaScript SDKs6.3 Medium- langflowLangflow Privilege Escalation8.8 High
- dbt-labs dbt-coreImplicit override for built-in materializations from installed packages in dbt-core4.2 Medium
- langflowLangflow remote code execution vulnerability9.8 Critical
- lightning-ai lightning-ai/pytorch-lightning, lightning ai ai\/pytorch lightning, lightningai pytorch lightning +2 moreRCE via Property/Class Pollution in lightning-ai/pytorch-lightning9.8 Critical
- logitech logi tuneElectron Code Injection in Logi Tune macOS Application4.4 Medium
- apache pulsarApache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution8.5 High
- rpyc project rpycRPyC's missing security check results in code execution when using numpy.array on the server-side.8.4 High
- drupal, drupal core +1 moreDrupal core - Moderately critical - Gadget Chain - SA-CORE-2025-0037.5 High
- apache solrApache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets8.8 High
- citrix session recording session recording, cloud software group citrix session recording, citrix virtual apps and desktops +2 moreCross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross...5.0 Medium
- nvidia dgx a100, dgx a100 firmware +1 moreCVE7.5 High
- crushftpCrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically...9.8 Critical
- eclipse glassfishGlassfish remote code execution6.8 Medium
torchservePyPITorchServe Pre-Auth Remote Code Execution9.9 Critical- moxa mxsecurity, mxsecurity series +1 moreMXsecurity Register Database Pollution5.3 Medium
- silabs gecko bootloaderSecond Stage Gecko Bootloader GBL Parser Buffer Overrun Vulnerability9.8 Critical
- zope restrictedpythonRestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape8.4 High
- authzed spicedbLookupResources may return partial results in spicedb3.7 Low
- mubarakalmehairbi touiToUI allows user-specific variables to be shared between users9.1 Critical
- patriksimek vm2vm2 Sandbox escape vulnerability9.8 Critical
- patriksimek vm2vm2 Sandbox Escape vulnerability10.0 Critical
- ghost sqlite3, ghost foundation node-sqlite3 +1 moresqlite vulnerable to code execution due to Object coercion8.1 High
- datahubJSON Injection in DataHub8.2 High
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privesc7.8 High
- backclickAn issue was discovered in BACKCLICK Professional 5.9.63. Due to an exposed internal...9.8 Critical
- budibase, budibase budibase/budibase +1 moreImproper Control of Dynamically-Managed Code Resources in budibase/budibase8.8 High
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio6.4 Medium
- crafter software cms, craftercms crafter cms +1 moreImproper Control of Dynamically-Managed Code Resources in Crafter Studio6.4 Medium
- patriksimek vm2vm2 vulnerable to Sandbox Escape before v3.9.1110.0 Critical
- otrs, otrs ag ((otrs)) community edition +1 morePerl Code execution in Template Toolkit6.8 Medium
- Show moreLoading…