CWE-707 · weakness in Input Validation and Logic
Improper Neutralization
25 CVEs · 2 exploited
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 2
Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.
- Microsoft Management Console Remote Code Execution Vulnerability
- Microsoft Management Console Security Feature Bypass Vulnerability
- Denial of service in nghttp2
- Cisco Secure Email Gateway Security Hardening Release
- An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust enviro…
- Specially crafted filenames in WordPress leading to XSS
- Cross-site scripting (XSS) in Search block in WordPress
- An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays a…
- Algorithm incorrectly returning error and Invalid unreduced value written to output buffer
- Philips Vue PACS
- Denial of Service via Malicious JSON Payloads in Throttling Events in Multiple WSO2 Products Causing Persistent Service Disruption
- Improper Neutralization vulnerability affects OpenText ALM Octane.
- Cisco IOS XR Software Security Hardening Release: September 2026
- Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralizati…
- Improper Neutralization in Splunk Enterprise
- Security Hardening in Splunk Enterprise - October 2026
- Improper Neutralization in Splunk SOAR
- Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
- Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
- Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin
- Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable inf…
- Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- Improper neutralization in the MigTD SPDM transport for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow a denial of service. Network adversary…
- Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwa…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.