Client-Side Enforcement of Server-Side Security

Every one of the 173 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct…CVE-2020-8162https://github.com/rails/rails · 3.0% likely
2. A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7…CVE-2024-23666Fortinet · CVSS 7.1 · 2.3% likely

   Fortinet

3. Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityCVE-2014-2374Accuenergy · CVSS 7.5 · 1.9% likely
4. Accuenergy Accuenergy Acuvim II Client-Side Enforcement of Server-Side SecurityCVE-2014-2373Accuenergy · CVSS 7.5 · 1.8% likely
5. A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3…CVE-2023-42787Fortinet · CVSS 6.2 · 1.7% likely

   Fortinet

6. mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they ca…CVE-2025-51682Mjobtime · CVSS 9.8 · 1.7% likely
7. Authentication Bypass in Symphony PlusCVE-2020-24683ABB · CVSS 9.8 · 1.5% likely

   ABB

8. Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation VulnerabilityCVE-2022-20658Cisco · CVSS 9.6 · 1.4% likely

   Cisco

9. It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset request. An attacker could use this flaw to…CVE-2017-12161Red Hat, Inc. · 1.3% likely

   Red Hat

10. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5…CVE-2025-33024Siemens · CVSS 9.9 · 1.3% likely

    Siemens

11. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5…CVE-2025-32469Siemens · CVSS 9.9 · 1.3% likely

    Siemens

12. A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEDCOM ROX RX1400 (All versions < V2.16.5…CVE-2025-33025Siemens · CVSS 9.9 · 1.3% likely

    Siemens

13. LitmusChaos Litmus client-side enforcement of server-side securityCVE-2025-8792LitmusChaos · CVSS 4.3 · 1.2% likely

    LitmusChaos

14. Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access.CVE-2023-39218Zoom Video Communications, Inc. · CVSS 6.1 · 1.1% likely

    Zoom Video Communications, Inc.

15. Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.CVE-2024-9844Ivanti · CVSS 7.1 · 1.0% likely

    Ivanti

16. Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to bypass same origin policy and proxy settings via a crafted HTML pa…CVE-2023-0704Google · CVSS 6.5 · 1.0% likely

    Google

17. A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the application removes the us…CVE-2017-14013ProMinent MultiFLEX M10a Controller · 0.9% likely
18. Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit…CVE-2021-21544Dell · CVSS 2.7 · 0.9% likely

    Dell

19. Missing Server-Side Authentication Checks in EfficientLab WorkExaminer ProfessionalCVE-2025-10640EfficientLab · CVSS 9.8 · 0.9% likely
20. Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side SecurityCVE-2022-1525Cognex · CVSS 9.1 · 0.9% likely

    Cognex

21. A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthori…CVE-2024-31491Fortinet · CVSS 8.6 · 0.8% likely

    Fortinet

22. Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag…CVE-2022-3308Google · CVSS 7.4 · 0.8% likely

    Google

23. Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004.CVE-2025-27681Printerlogic · CVSS 9.8 · 0.8% likely
24. Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an a…CVE-2020-5345Dell · CVSS 6.4 · 0.7% likely

    Dell

25. PrivateContent <= 8.4.3 - Protection Mechanism BypassCVE-2023-0581LCWeb · CVSS 5.3 · 0.7% likely

    LCweb

26. U.S. GAO EPDS and CBCA EDS client-based privilege escalationCVE-2026-54104Government Accountability Office · CVSS 8.8 · 0.7% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.