Advisories · Weakness

CWE-114.

Every Advisory and CVE whose sources give the weakness CWE-114, newest first.

CVE-2026-94347 CVE record

CVSS 7.2 High

Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7…
- Dell PowerProtect Data Domain Virtual Edition
- CWE-114
Not analysed yet 27 Oct 2026
vm2 npm

CVSS 9.4 CriticalCritical · CVSS 9+

vm2 crypto builtin loads attacker native code through setEngine
- CWE-114
>=3.11.3, <3.11.7 · fixed in 3.11.7

GHSA-46pr-c5wc-xffx · CVE-2026-92939 Not analysed yet 1 Oct 2026
vm2 npm

CVSS 9.9 Critical

Duplicate Advisory: vm2 crypto builtin loads attacker native code through setEngine
- CWE-114
>=3.11.3, <=3.11.6 · no fixed version yet

GHSA-6jgm-4w45-vh8j Withdrawn Not analysed yet 17 Sept 2026
CVE-2026-26945 CVE record

CVSS 5.3 Medium

Integrated Dell Remote Access Controller: Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181…
- Integrated Dell Remote Access Controller
- CWE-114
Not analysed yet 18 Mar 2026
CVE-2026-29046 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

TinyWeb: HTTP Header Control Character Injection into CGI Environment
- maximmasiutin TinyWeb
- Other injection
- CWE-20
Not analysed yet 6 Mar 2026
CVE-2025-36250 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

AIX Code Execution
- IBM AIX
- IBM VIOS
- CWE-114
Not analysed yet 13 Nov 2025
CVE-2025-36251 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

AIX Command Execution
- IBM AIX
- IBM VIOS
- CWE-114
Not analysed yet 13 Nov 2025
CVE-2025-46370 CVE record

CVSS 3.3 Low

Dell Alienware Command Center 6.x (AWCC): Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0…
- Dell Alienware Command Center 6.x (AWCC)
- CWE-114
Not analysed yet 13 Nov 2025
CVE-2025-1950 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

IBM Hardware Management Console - Power Systems command execution
- IBM Hardware Management Console - Power Systems
- CWE-114
Not analysed yet 22 Apr 2025
CVE-2024-56347 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

IBM AIX command execution
- IBM AIX
- CWE-114
Not analysed yet 18 Mar 2025
CVE-2024-56346 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

IBM AIX command execution
- IBM AIX
- CWE-114
Not analysed yet 18 Mar 2025
CVE-2025-0160 CVE record

CVSS 8.1 High

IBM FlashSystem code execution
- IBM Storage Virtualize
- CWE-114
Not analysed yet 28 Feb 2025
CVE-2025-23385 CVE record

CVSS 7.8 High

JetBrains ReSharper: In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4…
- JetBrains ReSharper
- JetBrains Rider
- CWE-114
Not analysed yet 28 Jan 2025
CVE-2024-44168 CVE record

CVSS 5.5 Medium

A library injection issue was addressed with additional restrictions.
- Apple macOS
- CWE-114
Not analysed yet 16 Sept 2024
CVE-2024-8207 CVE record

CVSS 6.4 Medium

MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths
- MongoDB Inc MongoDB Server
- CWE-114
Not analysed yet 27 Aug 2024
CVE-2024-32004 CVE record

CVSS 8.2 High

Git vulnerable to Remote Code Execution while cloning special-crafted local repositories
- git
- CWE-114
Not analysed yet 14 May 2024
CVE-2024-25021 CVE record

CVSS 8.4 High

IBM AIX command execution
- IBM AIX
- CWE-114
Not analysed yet 22 Feb 2024
k8s.io/kubernetes Go

CVSS 5.8 Medium

Kube-proxy may unintentionally forward traffic
- CWE-114
<1.21.0 · fixed in 1.21.0

GHSA-35c7-w35f-xwgh · CVE-2021-25736 Not analysed yet 30 Oct 2023
CVE-2023-40299 CVE record

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.
- CWE-114
Not analysed yet 4 Oct 2023
CVE-2023-4487 CVE record

CVSS 7.8 High

GE Digital CIMPLICITY Process Control
- GE Digital CIMPLICITY
- CWE-114
Not analysed yet 5 Sept 2023
CVE-2022-23748 CVE record

CVSS 7.8 HighCritical · KEVKEV

mDNSResponder.exe is vulnerable to DLL Sideloading attack.
- Audinate Dante Application Library for Windows
- CWE-114
Not analysed yet 17 Nov 2022
CVE-2020-8107 CVE record

CVSS 8.2 High

Process Control vulnerability in Bitdefender Antivirus Plus
- Bitdefender Antivirus Plus
- Bitdefender Internet Security
- CWE-114
Not analysed yet 18 Feb 2022
CVE-2020-6024 CVE record

Check Point SmartConsole: Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119…
- Check Point SmartConsole
- CWE-114
Not analysed yet 20 Jan 2021
CVE-2020-6014 CVE record

Check Point Endpoint Security Client for Windows: Check Point Endpoint Security Client for Windows…
- Check Point Endpoint Security Client for Windows
- CWE-114
Not analysed yet 30 Oct 2020
CVE-2020-11081 CVE record

CVSS 5.3 Medium

osquery susceptible to DLL search order hijacking of zlib1.dll
- osquery
- CWE-114
Not analysed yet 10 Jul 2020
CVE-2020-11075 CVE record

CVSS 7.7 High

Shell Escape in Anchore Engine
- anchore-engine
- CWE-114
Not analysed yet 27 May 2020
CVE-2019-8461 CVE record

Check Point Endpoint Security Initial Client for Windows: Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to…
- Check Point Endpoint Security Initial Client for Windows
- CWE-114
Not analysed yet 29 Aug 2019
CVE-2019-8458 CVE record

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI.
- Check Point Endpoint Security Client for Windows, Anti-Malware blade
- CWE-114
Not analysed yet 20 Jun 2019
CVE-2019-8453 CVE record

Check Point ZoneAlarm: Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from…
- Check Point ZoneAlarm
- CWE-114
Not analysed yet 17 Apr 2019