CWE-1285 · weakness in Input Validation and Logic
Improper Validation of Specified Index, Position, or Offset in Input
56 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 56 is a mark on the map. Named now: 1 to 26, most at risk first.
- Missing input check in lvpict.cpp used in NI LabVIEW
- NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially…
- MariaDB: insufficient validation of binary frm data when opening a table
- IBM Tivoli Monitoring code execution
- A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence num…
- Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.
- Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication
- Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module
- SRX5000 Series with SPC3, SRX4000 Series, and vSRX: When PowerMode IPsec is configured, the PFE will crash upon receipt of a malformed ESP packet
- Improper Error Handling Issue in LabVIEW
- Improper Error Handling Issue in LabVIEW
- Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series
- Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Series/LBP620C Series/…
- A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (…
- ZIP64 End of Central Directory (EOCD) Locator record offset not checked
- bhyve(8) infinite loop in the hda audio driver
- In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a crafted SNMPv3 security parameters.
- In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the…
- bhyve(8) NVMe driver to guest-induced infinite loops.
- Panic in name constraint checking for malformed certificates in crypto/x509
- cpp-httplib DoS: Negative chunk-size in chunked Transfer-Encoding
- Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet.
- Heap memory out of bounds read and crash in C Driver legacy GridFS file reader
- Out Of Bounds Write when parsing a DSB file with Digilent DASYLab
- Memory Corruption Issue in NI LabVIEW due to improper error handling
- Softros LAN Messenger 9.2 Denial of Service via Log Files Location
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.