CWE-606 · weakness in Input Validation and Logic
Unchecked Input for Loop Condition
39 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.
- Excessive time spent checking DH keys and parameters
- Excessive time spent in DH check / generation with large Q parameter value
- Excessive time spent checking DH q parameter value
- Excessive time spent checking invalid RSA public keys
- Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
- .NET Denial of Service Vulnerability
- Excessive time spent checking DSA keys and parameters
- Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These t…
- Unbounded name compression could lead to Denial of Service
- Unbounded resend loop in BIND 9 resolver
- Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service
- Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
- Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service
- OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.
- Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
- Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
- Mermaid radar diagrams are vulnerable to DoS
- smol-toml: Denial of Service via malformed TOML documents
- An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library to enter an infinite loop by sending a…
- Temporal Server Schedule exclusion search can cause excessive CPU consumption
- Authenticated Relative Path Traversal
- Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial of service or other…
- Denial of service (DOS) in SAP Supply Chain Management
- Denial of service (DOS) in SAP Supply Chain Management
- Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through…
- Authenticated Unchecked Loop Condition
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.