Vulnerabilities > Improper Control of Dynamically-Managed Code Resources

DATE CVE VULNERABILITY TITLE RISK
2024-01-12 CVE-2023-31032 Improper Control of Dynamically-Managed Code Resources vulnerability in Nvidia DGX A100 Firmware 1.18/1.8
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access.
local
low complexity
nvidia CWE-913
5.5
2023-11-18 CVE-2023-43177 Improper Control of Dynamically-Managed Code Resources vulnerability in Crushftp
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes.
network
low complexity
crushftp CWE-913
critical
9.8
2023-11-03 CVE-2023-5763 Improper Control of Dynamically-Managed Code Resources vulnerability in Eclipse Glassfish 5.1.0/6.0.0/6.2.5
In Eclipse Glassfish 5 or 6, running with old versions of JDK (lower than 6u211, or < 7u201, or < 8u191), allows remote attackers to load malicious code on the server via access to insecure ORB listeners.
network
low complexity
eclipse CWE-913
critical
9.8
2023-09-25 CVE-2022-4318 Improper Control of Dynamically-Managed Code Resources vulnerability in multiple products
A vulnerability was found in cri-o.
local
low complexity
kubernetes redhat fedoraproject CWE-913
7.8
2023-09-02 CVE-2023-39983 Improper Control of Dynamically-Managed Code Resources vulnerability in Moxa Mxsecurity 1.0/1.0.1
A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been identified in MXsecurity versions prior to v1.0.1.
network
low complexity
moxa CWE-913
5.3
2023-07-11 CVE-2023-37271 Improper Control of Dynamically-Managed Code Resources vulnerability in Zope Restrictedpython
RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment.
network
low complexity
zope CWE-913
critical
9.9
2023-06-26 CVE-2023-35930 Improper Control of Dynamically-Managed Code Resources vulnerability in Authzed Spicedb 1.22.0
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
network
low complexity
authzed CWE-913
5.3
2023-05-30 CVE-2023-33175 Improper Control of Dynamically-Managed Code Resources vulnerability in Toui Project Toui
ToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML.
network
low complexity
toui-project CWE-913
7.5
2023-04-14 CVE-2023-29199 Improper Control of Dynamically-Managed Code Resources vulnerability in VM2 Project VM2
There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers to bypass `handleException()` and leak unsanitized host exceptions which can be used to escape the sandbox and run arbitrary code in host context.
network
low complexity
vm2-project CWE-913
critical
10.0
2023-03-16 CVE-2022-43441 Improper Control of Dynamically-Managed Code Resources vulnerability in Ghost Sqlite3
A code execution vulnerability exists in the Statement Bindings functionality of Ghost Foundation node-sqlite3 5.1.1.
network
low complexity
ghost CWE-913
critical
9.8