CWE-841 · weakness in Input Validation and Logic
Improper Enforcement of Behavioral Workflow
84 CVEs · 1 exploited
Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
Every one of the 84 is a mark on the map. Named now: 1 to 26, most at risk first.
- SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
- Secheron SEPCOS Control and Protection Relay
- Windows DNS Denial of Service Vulnerability
- Secheron SEPCOS Control and Protection Relay
- SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow
- Secheron SEPCOS Control and Protection Relay
- Windows BitLocker Security Feature Bypass Vulnerability
- Windows BitLocker Security Feature Bypass Vulnerability
- FreeScout Has Business Logic Errors
- FreeScout Has Business Logic Errors
- Aimeos HTML client vulnerable to digital products download without proper payment status check
- Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table
- spa-cartcms Checkout Page checkout behavioral workflow
- Windows BitLocker Security Feature Bypass Vulnerability
- Windows BitLocker Security Feature Bypass Vulnerability
- FreeScout Has Business Logic Errors
- Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
- Dimension Log Server Configuration Lock Bypass Vulnerability
- Improper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an authenticated attacker with the delete permission to delete a PAM account that is…
- IBM Aspera Console Denial of Service
- 274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow
- gun HTTP/1.1 client accepts unsolicited 101 Switching Protocols response allowing server-driven protocol hijack and OOM
- FreeScout Has Business Logic Errors
- A loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the number of products.
- Improper Enforcement of Behavioral Workflow in GitLab
- Inappropriate implementation in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process and leveraged social engi…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.