CWE-419 · weakness in Access Control
Unprotected Primary Channel
8 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- check available
- 1
Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.
- Debug Endpoint pprof - Exposure Detection
- Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens…
- Spigot Command Exploit in Triton
- Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain an unprotected primary channel vulnerability. An unauthenticated networ…
- In Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach API to connect to an Eclipse OpenJ9 or IBM JVM on the same machine and use Attach…
- Envoy Admin Interface Exposed through prometheus metrics endpoint
- Unprotected Primary Channel vulnerability in Movistar 4G router
- TONE store App version 3.4.2 and earlier contains an issue with unprotected primary channel. Since TONE store App communicates with TONE store website in cleartext, a man-in-the-m…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.