CWE-779 · weakness in Denial of Service
Logging of Excessive Data
20 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.
- SuiteCRM v4 API Excessive log data DOS
- Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector a…
- A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a c…
- Potential secrets being logged to disk in CVE Services
- PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWT
- An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.
- Insufficient scope checks allows adding unrelated audit log entries
- Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive Logging
- Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.
- AIOHTTP Vulnerable to Cookie Parser Warning Storm
- Open OnDemand Shell App closed websocket DoS
- Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user sm…
- Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…
- Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sm…
- Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…
- Glance-store: glance store access key logged in debug log level
- Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.
- Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.