CWE-406 · weakness in Denial of Service
Insufficient Control of Network Message Volume (Network Amplification)
21 CVEs · 1 exploited
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.
- PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
- Implementations of UDP application protocols are susceptible to network loops and denial of service
- eProsima Fast DDS Network Amplification
- Potential Network Amplification and Information Exposure in RTI Connext Professional and Connext Micro
- TwinOaks Computing CoreDX DDS Secure Network Amplification
- A denial of service vulnerability was discovered in nbdkit 1.12.7, 1.14.1 and 1.15.1. An attacker could connect to the nbdkit service and cause it to perform a large amount of wor…
- OCI OpenDDS Secure Network Amplification
- An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify a…
- IBM MQ denial of service
- OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not re…
- Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of service
- Technitium 11.5.3 allows remote attackers to cause a denial of service (bandwidth amplification) because the DNSBomb manipulation causes accumulation of low-rate DNS queries such…
- An issue was discovered in Technitium through 11.0.2. It enables attackers to launch amplification attacks (3 times more than other "golden model" software like BIND) and cause po…
- An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and…
- 'max-global-quota' reset by DNSSEC validation restarts
- QTINeon has unauthenticated relay-to-host amplification via unbounded RECONNECT_REQUEST forwarding
- drybjed ansible-ntp main.yml amplification
- Technitium DNS Server excessive DNSSEC requests
- PocketMine-MP before 5.39.2 Network Amplification via ActorEventPacket
- DoS Vulnerability in ntpd-rs
- ICMPv6 error messages sent for multicast-destined packets and non-unique source addresses enable network amplification in Zephyr's IPv6 stack
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.