Skip to content
BackEsc
Sign in

connection · two weakness classes

Denial of Service with Input Validation and Logic

138 CVEs · 2 exploited

Every dot is a CVE whose record names a weakness from both classes, neither being the other's parent in the CWE hierarchy: this is what the line between them on the dial stands for.

exploited in the wild
2
check available
1
likely to be exploited
6

Every one of the 138 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    CWE-416PHPChina-nexus actorLazarus Group59 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  2. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    CWE-416PHPChina-nexus actorLazarus Group60 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  3. dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunksCVE-2026-38361Fohrloop · CVSS 7.5 · 2.6% likely

    CWE-400

  4. Denial of Service in HTTP Header parser in squid proxyCVE-2024-25617squid-cache · CVSS 5.3 · 88% likely

    CWE-400Squid-Cache

  5. The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows re…CVE-2016-8740Apache Software Foundation · 79% likely

    CWE-20Apache

  6. Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service (CPU consumption) or execute arbitrary code via…CVE-2007-288436% likely

    CWE-20

  7. Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of ser…CVE-2014-356723% likely

    CWE-20

  8. The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an invalid value of the flags parameter, pro…CVE-2007-380611% likely

    CWE-20

  9. Denial of Service in Helper Process managementCVE-2023-49286squid-cache · CVSS 8.6 · 10% likely

    CWE-617Squid-Cache

  10. packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values.CVE-2006-00477.9% likely

    CWE-20

  11. Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714jhy · CVSS 7.5 · 6.7% likely

    CWE-835

  12. Apache Tomcat: HTTP/2 excess header handling DoSCVE-2024-34750Apache Software Foundation · CVSS 7.5 · 4.6% likely

    CWE-755Apache

  13. Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified manipulations involving the newc…CVE-2010-12854.2% likely

    CWE-20

  14. OpenStack Neutron before 2014.1.4 and 2014.2.x before 2014.2.1 allows remote authenticated users to cause a denial of service (crash) via a crafted dns_nameservers value in the DN…CVE-2014-78213.9% likely

    CWE-20

  15. QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).CVE-2018-202163.9% likely

    CWE-252

  16. The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload)…CVE-2016-13513.7% likely

    CWE-20

  17. Algorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier for Perl allows remote attackers to cause a denial of service (CPU consumption) vi…CVE-2015-76863.5% likely

    CWE-20

  18. Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a…CVE-2008-34102.6% likely

    CWE-20

  19. .NET and Visual Studio Denial of Service VulnerabilityCVE-2024-43499Microsoft · CVSS 7.5 · 2.6% likely

    CWE-409Microsoft

  20. A permissive list of allowed inputs flaw was found in DPDK. This issue allows a remote attacker to cause a denial of service triggered by sending a crafted Vhost header to DPDK.CVE-2022-2132Dpdk · 2.4% likely

    CWE-791

  21. HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG through 2019-09-28, as used in WinPR in FreeRDP and other products, has a memory leak because a supplied realloc pointer (i…CVE-2019-171782.3% likely

    CWE-252

  22. Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S allows remote attackers to cause a denial of service (d…CVE-2015-62822.2% likely

    CWE-20

  23. The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption…CVE-2011-21982.2% likely

    CWE-20

  24. In Wireshark 2.2.0 to 2.2.1, the Profinet I/O dissector could loop excessively, triggered by network traffic or a capture file. This was addressed in plugins/profinet/packet-pn-rt…CVE-2016-93722.1% likely

    CWE-20

  25. Potential denial of service when configured to send Retry packets in s2n-quicCVE-2026-94450AWS · CVSS 7.5 · 1.9% likely

    CWE-1284AWS

  26. Invalid handling of CLASS != INCVE-2026-5946ISC · CVSS 7.5 · 1.9% likelycovered by CyberSIXT

    CWE-125ISC

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in