CWE-242

CVEs per yearBy the year they were published

1. 20171
2. 20191
3. 20211
4. 20221
5. 20231
6. 20241
7. 20253
8. 20262

Newest CVEs

• CVE-2026-11980

  Code execution in IBM Desktop App

  IBM · Aspera Desktop App

  High7.3
• CVE-2026-6477

  PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

  PostgreSQL

  High8.8
• CVE-2025-1994

  IBM Cognos Command Center code execution

  IBM · Cognos Command Center

  High7.8
• CVE-2025-49215

  A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected…

  Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server

  High8.8
• CVE-2025-1331

  IBM CICS TX code execution

  IBM · CICS TX Standard

  High7.8
• CVE-2024-52324

  Ruijie Reyee OS Use of Inherently Dangerous Function

  Ruijie · Reyee OS

  Critical9.2
• CVE-2021-40698

  ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypass

  Adobe · ColdFusion

  High7.4
• CVE-2022-36310

  Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write…

  Airspan · AirVelocity

  High8.8
• CVE-2021-42543

  AzeoTech DAQFactory

  AzeoTech · DAQFactory

  High7.8
• CVE-2017-1002157

  modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

  Fedora Modularity · modulemd

  Critical9.8

Vendors it comes up for most

1. IBM3
2. Adobe1
3. Airspan1
4. AzeoTech1
5. Fedora Modularity1
6. Ruijie1
7. Trend Micro, Inc.1
8. jtdowney1