CWE-694 · weakness in Injection and Smuggling
Use of Multiple Resources with Duplicate Identifier
17 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.
- Duplicate plugin entries in Helm
- BT: Possible to overwrite an existing bond during keys distribution phase when the identity address of the bond is known
- Duplicated chart entries in Helm
- Cisco IOS XE Software for Wireless LAN Controllers CAPWAP Join Denial of Service Vulnerability
- SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
- Bluetooth: l2cap: clear chan->ident on ECRED reconfiguration success
- Traefik: Gateway API route identity collision allows cross-namespace backend hijacking
- Keylime: keylime: registrar allows identity takeover via duplicate uuid registration
- Duplicate geometry fields via unvalidated GeoJSON extra members
- Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
- Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker with physical access to HBUS communicati…
- Vulnerability in Cryptobox allows an authenticated user to trigger an account lockout
- JupyterHub through 6.0.1 OAuth Client ID Collision via Unescaped Hyphen
- Use of Multiple Resources with Duplicate Identifier in APM Server Leading to Information Disclosure
- PingID integration for Windows login duplicate username collision.
- filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
- Duplicate Identity / Identity Shadowing across CustomerUser backends
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.