Advisories · Weakness
CWE-242.
Every Advisory and CVE whose sources give the weakness CWE-242, newest first.
- CVSS 7.3 High
Code execution in IBM Desktop App
- IBM Aspera Desktop App
- CWE-242
- CVSS 8.8 High
PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory
- PostgreSQL
- Memory corruption
- CWE-242
- CVSS 7.8 High
IBM Cognos Command Center code execution
- IBM Cognos Command Center
- CWE-242
- CVSS 8.8 High
A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations.
- Trend Micro, Inc. Trend Micro Endpoint Encryption Policy Server
- CWE-242
- CVSS 7.8 High
IBM CICS TX code execution
- IBM CICS TX Standard
- IBM CICS TX Advanced
- CWE-242
- CVSS 9.2 CriticalCritical · CVSS 9+
Ruijie Reyee OS Use of Inherently Dangerous Function
- Ruijie Reyee OS
- CWE-242
- CVSS 7.4 High
ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass
- Adobe ColdFusion
- CWE-242
-
Airspan AirVelocity: Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB…
- Airspan AirVelocity
- CWE-242
- CVSS 7.8 High
AzeoTech DAQFactory
- AzeoTech DAQFactory
- CWE-242
- CVSS 9.8 CriticalCritical · CVSS 9+
modulemd uses an unsafe function for processing externally provided data
- CWE-20
- CWE-242
<1.3.2 · fixed in 1.3.2
GHSA-jhjh-ghwx-6h7r · CVE-2017-1002157 -
private_address_check vulnerable to bypass of Resolv.getaddresses method
- CWE-242
<0.4.0 · fixed in 0.4.0
GHSA-hxhj-hp9m-qwc4 · CVE-2017-0904