CWE-1100 Insufficient Isolation of System-Dependent Functions
baseThe product or code does not isolate system-dependent functionality into separate standalone modules.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (6)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-3466US | high7.2 | — | ||
langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability ari… | ||||
| CVE-2024-9612US | medium6.5 | — | ||
In danswer-ai/danswer v0.3.94, administrators can set the visibility of pages within a workspace, including the search page. When the search page is set to be invisible, regular us… | ||||
| CVE-2021-32575US | medium6.5 | — | ||
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC… | ||||
| CVE-2026-44008US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.2, the new method neutralizeArraySpeciesBatch works with objects from the other side but can call into this side via get… | ||||
| CVE-2026-44007US | — | — | ||
vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.1, when a NodeVM is created with nesting: true, sandbox code can unconditionally require('vm2') regardless of the outer… | ||||
| CVE-2024-7045US | —OT elevated | — | ||
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan