CWE-253 · weakness in Input Validation and Logic
Incorrect Check of Function Return Value
22 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.
- It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restr…
- Windows Hyper-V Denial of Service Vulnerability
- An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitializ…
- Potential Captcha Validate Bypass in flask-session-captcha
- Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability
- Arbitrary file read
- Routinator terminates when RTR connection is reset too quickly after opening
- ink! vulnerable to incorrect decoding of storage value when using `DelegateCall`
- Corosync: corosync: denial of service and information disclosure via crafted udp packet
- Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64
- An issue discovered in TOTOLINK X6000R v9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the sub_41284C function.
- Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes
- Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
- Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
- ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-match
- Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.
- MCU Firmware Update Authentication Bypass on Caliptra Core
- mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
- uutils coreutils chmod False Success Exit Code in Recursive Mode
- uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode
- bpf: Fix ld_{abs,ind} failure path analysis in subprogs
- The vulnerability stems from an incorrect error-checking logic in the CreateCounter() function (in threadx/utility/rtos_compatibility_layers/OSEK/tx_osek.c) when handling the retu…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.