CWE-698 · weakness in Input Validation and Logic
Execution After Redirect (EAR)
22 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- check available
- 3
Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.
- NetAlert X - Arbitary File Read
- Progress ShareFile Storage Zones Controller - Authentication Bypass
- Dockwatch <= 0.6.567 - OS Command Injection
- SourceCodester Computer Laboratory Management System config.php redirect
- SourceCodester Employee Task Management System admin-manage-user.php redirect
- SourceCodester Employee Task Management System task-info.php redirect
- SourceCodester Employee Task Management System task-details.php redirect
- SourceCodester Employee Task Management System manage-admin.php redirect
- SourceCodester Employee Task Management System edit-task.php redirect
- ScriptAndTools Real Estate Management System userlist.php redirect
- Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel
- Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS
- Authentication Bypass in Sarman Soft's CMS
- Control Web Panel (CWP) < 1.12 Execution After Redirect in CWPUserIndex
- go2ismail Free-CRM Administrative redirect
- go2ismail Asp.Net-Core-Inventory-Order-Management-System Administrative redirect
- mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect
- Multiple vulnerabilities on Meta4 HR from Cegid
- An execution after redirect in Samsung DMS(Data Management Server) allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of…
- Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)
- a4m4 Student-Management-System Admin Endpoint admin redirect
- Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability. A low privileged attacker with local access could pot…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.