Skip to content
BackEsc
Sign in

CWE-1284 · weakness in Input Validation and Logic

Improper Validation of Specified Quantity in Input

366 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
check available
2
likely to be exploited
6

Every one of the 366 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addre…CVE-2010-3904Linux · CVSS 7.8 · 16% likely

    Linux

  2. N-central - Authentication BypassCVE-2025-9316N-able · CVSS 6.9 · 37% likely

    N-able

  3. WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCECVE-2026-49777ShapedPlugin, LLC · CVSS 10 · 1.7% likely

    ShapedPlugin LLC

  4. An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploi…CVE-2021-4326758% likely
  5. D-link DIR-816 A2_v1.10CNB04, DIR-878 DIR_878_FW1.30B08.img is vulnerable to Buffer Overflow via /goform/addRouting.CVE-2022-3662024% likely
  6. Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote…CVE-2008-144023% likely
  7. D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tp_usrname will be decrypted by base64, and the result will be sto…CVE-2022-3713422% likely
  8. Varnish 2.0.6 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary c…CVE-2009-4488CVSS 9.8 · 13% likely
  9. NetScaler Console and NetScaler SDX (SVM) - Arbitrary file readCVE-2025-4365NetScaler · CVSS 6.9 · 10% likely

    Citrix (NetScaler)

  10. NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management InterfaceCVE-2025-5349NetScaler · CVSS 8.7 · 6.9% likely

    Citrix (NetScaler)

  11. In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.CVE-2021-45462CVSS 7.5 · 4.6% likely
  12. src/sdp.c in bluez-libs 3.30 in BlueZ, and other bluez-libs before 3.34 and bluez-utils before 3.34 versions, does not validate string length fields in SDP packets, which allows r…CVE-2008-2374CVSS 9.8 · 4.3% likely
  13. Apache HTTP Server: HTTP response splittingCVE-2023-38709Apache Software Foundation · CVSS 7.3 · 3.9% likely

    Apache

  14. Improper access control on the NetScaler Management InterfaceCVE-2025-8424NetScaler · CVSS 8.7 · 3.7% likely

    Citrix (NetScaler)

  15. Keystone: openstack keystone: denial of service via large http request with long tenant nameCVE-2013-0270Red Hat · CVSS 6.5 · 3.2% likely

    Red Hat

  16. Denial of Service in CLFS.sysCVE-2024-6768Microsoft · CVSS 6.8 · 2.5% likely

    Microsoft

  17. NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is not handled properly, which can allow a…CVE-2022-28199NVIDIA · CVSS 6.5 · 2.3% likely

    NVIDIA

  18. A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All vers…CVE-2021-31346Siemens · CVSS 8.2 · 2.0% likely

    Siemens

  19. Potential denial of service when configured to send Retry packets in s2n-quicCVE-2026-94450AWS · CVSS 7.5 · 1.9% likely

    AWS

  20. The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a d…CVE-2022-407611.8% likely
  21. A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), PLUSCONTROL 1st Gen (All vers…CVE-2021-31345Siemens · CVSS 7.5 · 1.6% likely

    Siemens

  22. An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. MWOAuthConsumerSubmitControl.php does not ensure that the length of an RSA key will fit in a MySQL blo…CVE-2021-315561.6% likely
  23. Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of ServiceCVE-2022-0214Popup | Custom Popup Builder · 1.6% likely
  24. Denial of Service (DoS)CVE-2022-21208node-opcua · CVSS 7.5 · 1.5% likely
  25. A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated a…CVE-2022-2592GitLab · CVSS 6.5 · 1.5% likely

    GitLab

  26. In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain input…CVE-2023-411641.5% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in