Skip to content
BackEsc
Sign in

CWE-20 · weakness in Input Validation and Logic

Improper Input Validation

12,138 CVEs · 63 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
63
check available
50
likely to be exploited
766

Every one of the 12,138 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Cisco Adaptive Security Appliance (ASA)/Firepower Threat Defense (FTD) - Local File InclusionCVE-2020-3452Cisco · CVSS 7.5 · 100% likely
  2. Drupal - Remote Code ExecutionCVE-2018-7600Drupal · CVSS 9.8 · 100% likely
  3. A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote…CVE-2019-0604Microsoft · CVSS 9.8 · 100% likely
  4. Cisco ASA - Local File InclusionCVE-2018-0296Cisco · CVSS 7.5 · 100% likely
  5. ManageEngine - Remote Command ExecutionCVE-2022-47966Zoho · CVSS 9.8 · 100% likely
  6. Cisco Smart Install - Configuration DownloadCVE-2018-0171Cisco · CVSS 7.5 · 99% likely
  7. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0148Microsoft Corporation · CVSS 8.1 · 99% likely
  8. Atlassian Confluence - Privilege EscalationCVE-2023-22515Atlassian · CVSS 10 · 99% likely
  9. Adobe Commerce (Magento) - Remote Code ExecutionCVE-2022-24086Adobe · CVSS 9.8 · 99% likely
  10. Cisco IOS 12.2(55)SE11 - Remote Code ExecutionCVE-2017-3881Cisco · CVSS 9.8 · 99% likely
  11. Apache Struts2 S2-053 - Remote Code ExecutionCVE-2017-9791Apache Software Foundation · CVSS 9.8 · 99% likely
  12. The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to exe…CVE-2016-3714ImageMagick · CVSS 8.4 · 97% likely
  13. Microsoft Outlook Elevation of Privilege VulnerabilityCVE-2023-23397Microsoft · CVSS 9.8 · 97% likely
  14. A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulner…CVE-2020-1350Microsoft · CVSS 10 · 97% likely
  15. Cisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityCVE-2019-1652Cisco · CVSS 7.2 · 96% likely
  16. Adobe Commerce - Authentication BypassCVE-2025-54236Adobe · CVSS 9.1 · 96% likely
  17. Microsoft Outlook Remote Code Execution VulnerabilityCVE-2024-21413Microsoft · CVSS 9.8 · 95% likely
  18. UniFi OS Server - Command InjectionCVE-2026-34910Ubiquiti Inc · CVSS 10 · 90% likely
  19. The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows…CVE-2012-0151Microsoft · CVSS 7.8 · 88% likely
  20. Remote Code injection in Barracuda Email Security GatewayCVE-2023-2868Barracuda · CVSS 9.4 · 87% likely
  21. Cisco IP Phones Web Server Remote Code Execution and Denial of Service VulnerabilityCVE-2020-3161Cisco · CVSS 9.8 · 84% likely
  22. A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commandsCVE-2026-88771Citrix NetScaler · CVSS 9.5 · 82% likely
  23. A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution Vulnerability." This affects Wi…CVE-2018-8414Microsoft · CVSS 8.8 · 73% likely
  24. A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions, aka 'Microsoft SQL Server Remote Code Execution…CVE-2019-1068Microsoft · CVSS 8.8 · 57% likely
  25. Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content ch…CVE-2019-11708Mozilla · CVSS 10 · 56% likely
  26. The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code execution because of incorrect data validation. The Service Appliances are SA 100, SA…CVE-2022-29499Mitel · CVSS 9.8 · 55% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in