CWE-799 · weakness in Input Validation and Logic
Improper Control of Interaction Frequency
63 CVEs
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 63 is a mark on the map. Named now: 1 to 26, most at risk first.
- Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
- A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data
- ASUS GT-AXE11000, RT-AX3000, RT-AX55, RT-AX58U, TUF-AX3000 - Improper Authentication
- Lack of ratelimit on public DAV endpoint
- Rate-limits not working on instances without configured memory cache backend
- Lack of ratelimit on shareinfo endpoint
- Ratelimit not applied on OCS API responses
- Lack of ratelimit on public share link mount endpoint
- A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the firewall SSLVPN service. This vulnerability affected SonicOS Gen…
- Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service
- An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7…
- WOWS Karma vulnerable to a post submission bounce/timing attack
- IBM Aspera Faspex denial of service
- Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo
- In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms
- In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exp…
- No Rate Limiting Vulnerability
- phpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameter
- No Rate Limiting vulnerability
- Westermo L210-F2G Lynx Improper Control of Interaction Frequency
- Westermo L210-F2G Lynx Improper Control of Interaction Frequency
- No Rate Limiting Vulnerability in Wave 2.0
- OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency
- The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofact…
- Fides Webserver API Rate Limiting Vulnerability in Proxied Environments
- OmniBlocks: Spamming in Discussions tab possible via disc.yml
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.