Skip to content

CWE-779 · weakness in Denial of Service

Logging of Excessive Data

20 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

  1. SuiteCRM v4 API Excessive log data DOSCVE-2024-36416salesagility · CVSS 8.6 · 2.0% likely

    Salesagility

  2. Netwrix CoSoSys Endpoint Protector through 5.9.3 and CoSoSys Unify through 7.0.6 contain a remote code execution vulnerability in the logging component of the Endpoint Protector a…CVE-2024-36072CVSS 9.8 · 1.0% likely
  3. A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a c…CVE-2025-51397Livehelperchat · CVSS 5.4 · 1.0% likely

    Livehelperchat

  4. Potential secrets being logged to disk in CVE ServicesCVE-2022-31004CVEProject · CVSS 7.5 · 1.0% likely
  5. PocketMine-MP before 5.42.1 LogDoS via LoginPacket clientData JWTCVE-2026-86200pmmp · CVSS 5.3 · 0.6% likely

    Pmmp

  6. An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.CVE-2023-23949Broadcom · CVSS 8.1 · 0.6% likely

    Broadcom

  7. Insufficient scope checks allows adding unrelated audit log entriesCVE-2022-25779Secomea · CVSS 4.3 · 0.6% likely

    Secomea

  8. Klarna Checkout for WooCommerce < 2.13.5 - DoS via Excessive LoggingCVE-2024-13925Klarna · CVSS 7.5 · 0.5% likely
  9. Denial of service due to insufficient input validation in authentication logging. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 41186.CVE-2026-28718Acronis · CVSS 5.3 · 0.4% likely

    Acronis

  10. AIOHTTP Vulnerable to Cookie Parser Warning StormCVE-2025-69230aio-libs · CVSS 2.7 · 0.4% likely

    Aio-Libs

  11. Open OnDemand Shell App closed websocket DoSCVE-2025-53636OSC · CVSS 5.4 · 0.3% likely

    OSC

  12. Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user sm…CVE-2021-25423Samsung Mobile · 0.2% likely

    Samsung

  13. Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…CVE-2021-25422Samsung Mobile · 0.2% likely

    Samsung

  14. Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sm…CVE-2021-25421Samsung Mobile · 0.2% likely

    Samsung

  15. Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user sma…CVE-2021-25420Samsung Mobile · 0.2% likely

    Samsung

  16. Glance-store: glance store access key logged in debug log levelCVE-2024-1141Red Hat · CVSS 5.5 · 0.2% likely

    Red Hat

  17. Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCVE-2026-20210Cisco · CVSS 5.4 · 0.2% likely

    Cisco

  18. Cisco Catalyst SD-WAN Manager Privilege Escalation VulnerabilityCVE-2026-20209Cisco · CVSS 5.4 · 0.2% likely

    Cisco

  19. Sensitive log information leakage vulnerability in Samsung Account prior to version 13.5.0 allows attackers to unauthorized logout.CVE-2022-39874Samsung Mobile · CVSS 4 · 0.2% likely

    Samsung

  20. Logging of excessive data vulnerability in telephony prior to SMR Feb-2022 Release 1 allows privileged attackers to get Cell Location Information through log of user device.CVE-2022-22291Samsung Mobile · CVSS 5.5 · 0.1% likely

    Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in