Skip to content
BackEsc
Sign in

CWE-472 · weakness in Input Validation and Logic

External Control of Assumed-Immutable Web Parameter

167 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
3

Every one of the 167 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Craft CMS stores user-provided content in session filesCVE-2025-35939Craft · CVSS 5.3 · 1.4% likely

    Craft

  2. Remote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 114CVE-2024-25153Fortra · CVSS 9.8 · 42% likely

    Fortra

  3. Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium sec…CVE-2025-6191Google · CVSS 8.8 · 12% likely

    Google

  4. Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…CVE-2025-7656Google · CVSS 8.8 · 11% likely

    Google

  5. Integer overflow in Skia in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory…CVE-2026-8510Google · CVSS 7.5 · 10.0% likelycovered by CyberSIXT

    Google

  6. In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerabi…CVE-2017-5261Cambium Networks · 8.9% likely

    Cambium Networks

  7. Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…CVE-2025-10891Google · CVSS 8.8 · 8.7% likely

    Google

  8. In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console…CVE-2017-5260Cambium Networks · 8.1% likely

    Cambium Networks

  9. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1293Cisco · CVSS 9.8 · 5.7% likely

    Cisco

  10. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1294Cisco · CVSS 9.8 · 4.7% likely

    Cisco

  11. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1295Cisco · CVSS 9.8 · 4.4% likely

    Cisco

  12. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1291Cisco · CVSS 9.8 · 4.4% likely

    Cisco

  13. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1290Cisco · CVSS 9.8 · 4.4% likely

    Cisco

  14. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1289Cisco · CVSS 9.8 · 4.4% likely

    Cisco

  15. Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution VulnerabilitiesCVE-2021-1292Cisco · CVSS 9.8 · 4.4% likely

    Cisco

  16. A vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D, PXC100-E.D, PXC200-E.D with Desigo PX Web modules PXA40-W0, PXA40-W1, PXA40-W2 (All f…CVE-2019-13927Siemens AG · 1.7% likely

    Siemens

  17. Spoofing of From field in several screensCVE-2020-1765OTRS AG · CVSS 3.5 · 1.5% likely

    OTRS AG

  18. A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field.CVE-2022-30597moodle · 1.3% likely
  19. httparty Multipart/Form-Data Request Tampering VulnerabilityCVE-2024-22049Jnunemaker · CVSS 5.3 · 1.3% likely
  20. Integer overflow in Skia in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium s…CVE-2026-3538Google · CVSS 8.8 · 0.8% likely

    Google

  21. HCL Sametime is vulnerable to an information disclosureCVE-2021-27769HCL Software · CVSS 5.3 · 0.8% likely

    HCL Software

  22. HCL Sametime is vulnerable to arbitrary HTTP requestsCVE-2021-27770HCL Software · CVSS 6.8 · 0.7% likely

    HCL Software

  23. Integer overflow in Layout in Google Chrome prior to 129.0.6668.89 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev…CVE-2024-7025Google · CVSS 8.8 · 0.7% likely

    Google

  24. Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium…CVE-2026-3536Google · CVSS 8.8 · 0.7% likely

    Google

  25. Contact Form by WPForms – Drag & Drop Form Builder for WordPress <= 1.8.7.2 - Unauthenticated Price ManipulationCVE-2024-3649smub · CVSS 5.3 · 0.7% likely

    Smub

  26. Integer overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi…CVE-2026-2649Google · CVSS 8.8 · 0.6% likely

    Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in