Improper Enforcement of Message Integrity During Transmission in a Communication Channel

Every one of the 35 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of EAPOL-Key messages is not checked, leading to a decryption…CVE-2018-14526W1.fi · 1.5% likely

   W1.fi

2. MITM modification of request bodies in MinIOCVE-2021-21390minio · CVSS 6.5 · 0.9% likely

   MinIO

3. MicroLogix 1100 & 1400 Product Web Server Application Vulnerable to Denial-Of-Service Condition AttackCVE-2022-3166Rockwell Automation · CVSS 7.5 · 0.7% likely

   Rockwell Automation

4. Windows DNS Spoofing VulnerabilityCVE-2024-43450Microsoft · CVSS 7.5 · 0.6% likely

   Microsoft

5. Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service VulnerabilityCVE-2021-34793Cisco · CVSS 8.6 · 0.6% likely

   Cisco

6. A flaw was found in nbdkit due to to improperly caching plaintext state across the STARTTLS encryption boundary. A MitM attacker could use this flaw to inject a plaintext NBD_OPT_…CVE-2021-3716Nbdkit Project · 0.6% likely
7. In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.CVE-2020-5869F5 · 0.5% likely

   F5

8. An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. An attacker can spoof a direct-message channel by changing the type of a channel.CVE-2019-20844Mattermost · 0.4% likely

   Mattermost

9. Incorrect access control in the function handleDataChannelChat(dataMessage) of Mirotalk before commit c21d58 allows attackers to forge chat messages using an arbitrary sender name.CVE-2024-44730CVSS 9.1 · 0.4% likely
10. The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerabl…CVE-2021-41034The Eclipse Foundation · 0.4% likely

    Eclipse Foundation

11. ffxivlauncher.exe in Square Enix Final Fantasy XIV 4.21 and 4.25 on Windows is affected by Improper Enforcement of Message Integrity During Transmission in a Communication Channel…CVE-2018-7295Square-Enix · 0.4% likely
12. An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This all…CVE-2023-49933Schedmd · 0.4% likely

    Schedmd

13. SICK Lector8xx and InspectorP8xx vulnerable for code executionCVE-2025-0592SICK AG · CVSS 8.8 · 0.4% likely

    SICK AG

14. ICSA-20-098-05 KUKA.Sim Pro Improper Enforcement of Message Integrity During Transmission in a Communication ChannelCVE-2020-10635KUKA · CVSS 4.3 · 0.3% likely
15. CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service and loss of confidentia…CVE-2023-6408Schneider Electric · CVSS 8.1 · 0.3% likely

    Schneider Electric

16. CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause retrieval of password hash that could lead…CVE-2024-8933Schneider Electric · CVSS 7.5 · 0.3% likely

    Schneider Electric

17. A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, a…CVE-2025-29628Gardyn · CVSS 9.4 · 0.3% likelycovered by CyberSIXT

    Gardyn

18. Channel Accessible by Non-Endpoint in CBOT's ChatbotCVE-2023-2885CBOT · CVSS 8.1 · 0.3% likely

    CBOT

19. An issue in animal-art-lab v13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.CVE-2023-43297Linecorp · 0.2% likely

    Linecorp

20. DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerabilityCVE-2026-12576deltaww · CVSS 7.5 · 0.2% likely

    Deltaww

21. BIG-IP Edge Client for Windows and Mac OS vulnerabilityCVE-2023-22372F5 · CVSS 5.9 · 0.2% likely

    F5

22. LINE@ for Android version 1.0.0 and LINE@ for iOS version 1.0.0 are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS communications. As a res…CVE-2015-2968LINE Corporation · 0.2% likely

    LINE Corporation

23. LINE for Android version 5.0.2 and earlier and LINE for iOS version 5.0.0 and earlier are vulnerable to MITM (man-in-the-middle) attack since the application allows non-SSL/TLS co…CVE-2015-0897LINE Corporation · 0.2% likely

    LINE Corporation

24. Bluetens Electrostimulation Device BluetensQ device app version 4.3.15 is vulnerable to Man-in-the-middle attacks in the BLE channel. It allows attackers to decrease or increase t…CVE-2023-26979Bluetens · 0.2% likely
25. Information tampering and Denial-of-service (DoS) vulnerability in CC-Link IE TSN communication protocolCVE-2026-13584Mitsubishi Electric Corporation · CVSS 7.1 · 0.2% likely

    Mitsubishi Electric

26. Coturn: STUN attributes after MESSAGE-INTEGRITY are processed, letting on-path attackers modify authenticated TURN requestsCVE-2026-68554coturn · CVSS 2.3 · 0.2% likely

    Coturn Project

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.