Vulnerabilities > Improper Control of Dynamically-Managed Code Resources

DATE CVE VULNERABILITY TITLE RISK
2025-03-20 CVE-2024-8953 Improper Control of Dynamically-Managed Code Resources vulnerability in Composio 0.4.3
In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations.
network
low complexity
composio CWE-913
critical
9.8
2024-06-06 CVE-2024-5452 Improper Control of Dynamically-Managed Code Resources vulnerability in Lightningai Pytorch Lightning
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library.
network
low complexity
lightningai CWE-913
critical
9.8
2024-03-15 CVE-2024-2537 Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune
Improper Control of Dynamically-Managed Code Resources vulnerability in Logitech Logi Tune on MacOS allows Local Code Inclusion.
network
low complexity
logitech CWE-913
critical
9.8
2024-01-12 CVE-2023-31032 Improper Control of Dynamically-Managed Code Resources vulnerability in Nvidia DGX A100 Firmware 1.18/1.8
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access.
local
low complexity
nvidia CWE-913
5.5
2023-11-18 CVE-2023-43177 Improper Control of Dynamically-Managed Code Resources vulnerability in Crushftp
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
network
low complexity
crushftp CWE-913
critical
9.8
2023-11-03 CVE-2023-5763 Improper Control of Dynamically-Managed Code Resources vulnerability in Eclipse Glassfish 5.1.0/6.0.0/6.2.5
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
network
low complexity
eclipse CWE-913
critical
9.8
2023-09-25 CVE-2022-4318 Improper Control of Dynamically-Managed Code Resources vulnerability in multiple products
A vulnerability was found in cri-o.
local
low complexity
kubernetes redhat fedoraproject CWE-913
7.8
2023-09-02 CVE-2023-39983 Improper Control of Dynamically-Managed Code Resources vulnerability in Moxa Mxsecurity 1.0/1.0.1
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1.
network
low complexity
moxa CWE-913
5.3
2023-06-26 CVE-2023-35930 Improper Control of Dynamically-Managed Code Resources vulnerability in Authzed Spicedb 1.22.0
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
network
low complexity
authzed CWE-913
5.3
2023-05-30 CVE-2023-33175 Improper Control of Dynamically-Managed Code Resources vulnerability in Toui Project Toui
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML.
network
low complexity
toui-project CWE-913
7.5