Skip to content

CWE-710 · weakness in Input Validation and Logic

Improper Adherence to Coding Standards

9 CVEs

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.CVE-2020-1603Juniper Networks · CVSS 8.6 · 1.4% likely

    Juniper Networks

  2. Junos OS: BGP session termination upon receipt of specific BGP FlowSpec advertisement.CVE-2020-1613Juniper Networks · CVSS 8.6 · 1.3% likely

    Juniper Networks

  3. WEIDMUELLER: WLAN devices affected by privilege escalation vulnerabilityCVE-2021-33528Weidmüller · CVSS 8.8 · 1.1% likely

    Weidmüller

  4. Philips Vue PACS Improper Adherence to Coding StandardsCVE-2021-27501Philips · CVSS 7.5 · 0.9% likely

    Philips

  5. Palantir Gotham UI bug that could lead to incorrect data classificationCVE-2023-30961Palantir · CVSS 6.5 · 0.4% likely

    Palantir

  6. Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Coding Standards Vuln…CVE-2026-20334Cisco · CVSS 8.4 · 0.4% likely

    Cisco

  7. Improper Adherence to Coding Standards in Splunk EnterpriseCVE-2026-76285Splunk · CVSS 9.8 · 0.4% likely

    Splunk

  8. Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craf…CVE-2026-121124Google · CVSS 8.8 · 0.4% likely

    Google

  9. Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidential…CVE-2025-0007AMD · CVSS 5.7 · 0.1% likely

    AMD

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in