Skip to content
BackEsc
Sign in

CWE-749 · weakness in Access Control

Exposed Dangerous Method or Function

199 CVEs · 4 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
4
likely to be exploited
6

Every one of the 199 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. JBoss JMX/Web Console - Authentication Bypass via HTTP Verb TamperingCVE-2010-0738Red Hat · CVSS 3.7 · 74% likely

    Red Hat

  2. ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form w…CVE-2006-1547Apache · CVSS 7.5 · 55% likely

    Apache

  3. Red Hat JBoss - Web/JMX Console AccessCVE-2010-1428Red Hat · CVSS 5.9 · 53% likely

    Red Hat

  4. The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expos…CVE-2018-19322GIGABYTE · CVSS 7.8 · 1.8% likely

    GIGABYTE

  5. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Commvault CommCell 11.22.22. Although authentication is required to exploit this…CVE-2021-34996Commvault · CVSS 8.8 · 82% likely

    Commvault

  6. It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privil…CVE-2018-10931The Cobbler Project · CVSS 9.8 · 68% likely

    The Cobbler Project

  7. Inductive Automation Ignition OPC UA Quick Client Task Scheduling Exposed Dangerous Function Remote Code Execution VulnerabilityCVE-2023-38124Inductive Automation · CVSS 7.2 · 60% likely

    Inductive Automation

  8. Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous Function Authentication Bypass VulnerabilityCVE-2023-51573Voltronic Power · CVSS 9.8 · 46% likely

    Voltronic Power

  9. Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution VulnerabilityCVE-2023-27363Foxit · CVSS 7.8 · 42% likely

    Foxit

  10. A denial of service vulnerability exists in the TDDP functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) v5.1.0 Build 20220926. A specially crafted s…CVE-2023-49074Tp-Link · CVSS 7.4 · 13% likely

    TP-Link

  11. This vulnerability allows remote attackers to write arbitrary files on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this…CVE-2020-15623CentOS Web Panel · CVSS 9.8 · 8.3% likely

    CentOS Web Panel

  12. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit…CVE-2020-17388Marvell · CVSS 8.8 · 7.5% likely

    Marvell

  13. An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.CVE-2021-42128Ivanti Avalanche · 4.6% likely
  14. Beckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or FunctionCVE-2014-5415Beckhoff · CVSS 9.1 · 4.3% likely

    Beckhoff

  15. D-Link D-View coreservice_action_script Exposed Dangerous Function Remote Code Execution VulnerabilityCVE-2023-44414D-Link · CVSS 9.8 · 2.9% likely

    D-Link

  16. Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2025-26651Microsoft · CVSS 6.5 · 2.6% likely

    Microsoft

  17. IpTime C200 IP camera remote code execution vulnerabilityCVE-2021-26614EFM networks & multimedia · CVSS 7.5 · 2.5% likely
  18. Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For Git…CVE-2016-9469GitLab Community Edition & GitLab Enterprise Edition 8.13.0, 8.13.0-ee, 8.13.1,… · 2.4% likely
  19. NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution VulnerabilityCVE-2023-38101NETGEAR · CVSS 7.2 · 2.1% likely

    NETGEAR

  20. NETGEAR ProSAFE Network Management System BkreProcessThread Exposed Dangerous Function Remote Code Execution VulnerabilityCVE-2023-38097NETGEAR · CVSS 7.2 · 2.1% likely

    NETGEAR

  21. ICONICS GENESIS32 Exposed Dangerous Method or FunctionCVE-2014-0758ICONICS · CVSS 9.3 · 2.1% likely
  22. A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The SFTP service (default port 22/tcp) of the Control Center Server (CCS) does not prop…CVE-2019-18342Siemens · CVSS 9.9 · 2.1% likely

    Siemens

  23. The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted D…CVE-2016-74622.0% likely
  24. IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause the server to crash. IBM X-Force ID…CVE-2019-4386IBM · CVSS 6.5 · 2.0% likely

    IBM

  25. A vulnerability has been identified in SIMATIC PCS 7 V8.0 and earlier (All versions), SIMATIC PCS 7 V8.1 (All versions < V8.1 with WinCC V7.3 Upd 19), SIMATIC PCS 7 V8.2 (All vers…CVE-2019-10918Siemens AG · 1.9% likely

    Siemens

  26. Triangle MicroWorks SCADA Data Gateway DbasSectorFileToExecuteOnReset Exposed Dangerous Function Remote Code Execution VulnerabilityCVE-2023-39468Triangle MicroWorks · CVSS 7.2 · 1.9% likely

    Triangle MicroWorks

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in