Skip to content
BackEsc
Sign in

CWE-130 · weakness in Memory Corruption

Improper Handling of Length Parameter Inconsistency

128 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
4

Every one of the 128 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. MongoDB Server - Information Disclosure (MongoBleed)CVE-2025-14847MongoDB Inc. · CVSS 7.5 · 83% likely

    MongoDB

  2. An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14. get_supported_language_variant() was subject to a potential denial-of-service attack when used with very…CVE-2024-39614Djangoproject · CVSS 7.5 · 29% likely

    Djangoproject

  3. Apache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Apache Software Foundation · 13% likely

    Apache

  4. Apache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Apache Software Foundation · 12% likely

    Apache

  5. Apache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Apache Software Foundation · 11% likely

    Apache

  6. An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH_MSG_CHANNEL_REQUEST packets with an exit status message and no payload are parsed. A remote attack…CVE-2019-3862The libssh2 Project · CVSS 7.3 · 7.9% likely

    The libssh2 Project

  7. Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior,…CVE-2021-20588Mitsubishi Electric Corporation · CVSS 7.5 · 6.9% likely

    Mitsubishi Electric

  8. Azure Private 5G Core Denial of Service VulnerabilityCVE-2024-20685Microsoft · CVSS 5.9 · 5.5% likely

    Microsoft

  9. Buffer overflow in Brotli libraryCVE-2020-8927Google LLC · CVSS 5.3 · 3.3% likely

    Google

  10. Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric MELSEC iQ-R Series R00/01/02CPU, MELSEC iQ-R Series R04/08/16/32/120(EN)CPU, MELSEC iQ-R S…CVE-2021-20610Mitsubishi Electric Corporation · CVSS 7.5 · 3.3% likely

    Mitsubishi Electric

  11. OCI OpenDDS Secure Improper Handling of Length Parameter InconsistencyCVE-2021-38445OCI · CVSS 7 · 2.7% likely
  12. Apache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Apache Software Foundation · 2.6% likely

    Apache

  13. Apache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Apache Software Foundation · 2.5% likely

    Apache

  14. A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.CVE-2021-43666CVSS 7.5 · 2.1% likely
  15. Improper Handling of Length Parameter Inconsistency in ikus060/rdiffwebCVE-2022-3272ikus060 · CVSS 5.3 · 1.8% likely

    Ikus060

  16. AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root wit…CVE-2026-109390AnyDesk · CVSS 9.8 · 1.6% likely

    AnyDesk

  17. A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This attack affects all swift-nio-h…CVE-2022-24666Swift Project · 1.4% likely

    Swift Project

  18. Junos OS: SRX Series: An attacker may cause flowd to crash by sending certain valid SIP traffic to a device with SIP ALG enabled.CVE-2019-0055Juniper Networks · CVSS 7.5 · 1.3% likely

    Juniper Networks

  19. A program using swift-nio-http2 is vulnerable to a denial of service attack, caused by a network peer sending a specially crafted HTTP/2 frame. This vulnerability is caused by a l…CVE-2022-0618Swift Project · 1.3% likely

    Swift Project

  20. Jetty accepts "+" prefixed value in Content-LengthCVE-2023-40167eclipse · CVSS 5.3 · 1.3% likely

    Eclipse Foundation

  21. Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassemblyCVE-2026-33846Red Hat · CVSS 7.5 · 1.3% likely

    Red Hat

  22. Secure Boot Security Feature Bypass VulnerabilityCVE-2024-38011Microsoft · CVSS 8 · 1.3% likely

    Microsoft

  23. An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via v…CVE-2024-41990Djangoproject · CVSS 7.5 · 1.3% likely

    Djangoproject

  24. Improper Handling of Length Parameter Inconsistency vulnerability in Bitdefender Update Server (VA-10144)CVE-2022-0677Bitdefender · CVSS 7.5 · 1.2% likely

    Bitdefender

  25. An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7. urlize and urlizetrunc were subject to a potential denial of service attack via certain inputs with a ver…CVE-2024-38875Djangoproject · CVSS 7.5 · 1.2% likely

    Djangoproject

  26. An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit…CVE-2018-5453Moxa OnCell G3100-HSPA Series · 1.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in