CWE-628 · weakness in Input Validation and Logic
Function Call with Incorrectly Specified Arguments
5 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.
- A flaw was found in, Fedora versions of krb5 from 1.16.1 to, including 1.17.x, in the way a Kerberos client could crash the KDC by sending one of the RFC 4556 "enctypes". A remote…
- Snapd seccomp filter TIOCSTI ioctl bypass
- Zebra 4.5.0 Consensus Split via P2SH Sigop Overcount
- Tanium addressed a business logic error in Threat Response.
- KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.