CWE-1173 · weakness in Misconfiguration and Insecure Design
Improper Use of Validation Framework
9 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.
- Junos OS: Receipt of certain genuine BGP packets from any BGP Speaker causes RPD to crash.
- 3scale API Management 2 does not perform adequate sanitation for user input in multiple fields. An authenticated user could use this flaw to inject scripts and possibly gain acces…
- An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos 9110, and Exyn…
- Laravel Rest Api has a Search Validation Bypass
- stoatchat before 0.7.8 Unrestricted Account Creation
- CGI versions before 5.00 for Perl return request-derived values untainted under taint mode
- Improper Use of Validation Framework
- PrestaShop: Improper Use of Validation Framework
- CVE-2023-30949
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP