Skip to content
BackEsc
Sign in

CWE-706 · weakness in Input Validation and Logic

Use of Incorrectly-Resolved Name or Reference

147 CVEs · 2 exploited

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
2
check available
2
likely to be exploited
3

Every one of the 147 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code ExecutionCVE-2020-15505Ivanti · CVSS 9.8 · 100% likely

    Ivanti

  2. Zoho ManageEngine ADSelfService Plus v6113 - Unauthenticated Remote Command ExecutionCVE-2021-40539Zoho · CVSS 9.8 · 99% likely

    Zoho (ManageEngine)

  3. Docassemble - Local File InclusionCVE-2024-27292jhpyle · CVSS 7.5 · 69% likely
  4. Auerswald COMfortel 1400/2600/3600 IP - Authentication BypassCVE-2021-4085650% likely
  5. A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationM…CVE-2019-0220Apache Software Foundation · 18% likely

    Apache

  6. An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…CVE-2019-0571Microsoft · 16% likely

    Microsoft

  7. A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filter…CVE-2021-31933CVSS 7.2 · 14% likely
  8. A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering Vulnerability'.CVE-2019-1351Microsoft · 8.7% likely

    Microsoft

  9. mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which allows remote attackers to spoof the output that GnuPG sends on…CVE-2018-120208.2% likely
  10. Remote Code Execution in Git Credential Manager CoreCVE-2020-26233microsoft · CVSS 7.3 · 6.0% likely

    Microsoft

  11. An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS Alternate Data Streams. This may allow r…CVE-2020-122785.2% likely
  12. An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote c…CVE-2020-122795.1% likely
  13. Envoy 1.9.0 and before does not normalize HTTP URL paths. A remote attacker may craft a relative path, e.g., something/../admin, to bypass access control, e.g., a block on /admin.…CVE-2019-9901CVSS 6.5 · 5.0% likely
  14. MyWebSQL 3.7 has a remote code execution (RCE) vulnerability after an attacker writes shell code into the database, and executes the Backup Database function with a .php filename…CVE-2019-77314.2% likely
  15. A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.CVE-2022-27778Haxx · 3.8% likely
  16. An issue was discovered in OFCMS before 1.1.3. Remote attackers can execute arbitrary code because blocking of .jsp and .jspx files does not consider (for example) file.jsp::$DATA…CVE-2019-96162.7% likely
  17. An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" sc…CVE-2019-89082.3% likely
  18. An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.CVE-2021-273061.8% likely
  19. Making URLs clickable and allowing them to be styled in DevTools in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to bypass navigation restrictions via a crafted…CVE-2018-6112Google · 1.6% likely

    Google

  20. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functiona…CVE-2020-13311GitLab · CVSS 4.3 · 1.5% likely

    GitLab

  21. MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.CVE-2026-92262MariaDB · CVSS 9.9 · 1.5% likelycovered by CyberSIXT

    MariaDB1 article

  22. A file-rename filter bypass exists in admin/media/rename.php in WBCE CMS 1.4.0 and earlier. This can be exploited by an authenticated user with admin privileges to rename a media…CVE-2019-175751.4% likely
  23. An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON…CVE-2020-105741.4% likely
  24. A security feature bypass exists in Azure SSH Keypairs, due to a change in the provisioning logic for some Linux images that use cloud-init, aka 'Azure SSH Keypairs Security Featu…CVE-2019-0816Microsoft · 1.4% likely

    Microsoft

  25. Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters (%2F or %5C) could…CVE-2021-319201.3% likely
  26. CSZ CMS 1.2.9 is vulnerable to Arbitrary File Deletion. This occurs in PHP when the unlink() function is called and user input might affect portions of or the whole affected param…CVE-2021-371441.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in