Skip to content

CWE-1250 · weakness in Other weaknesses

Improper Preservation of Consistency Between Independent Representations of Shared State

8 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. PostgreSQL row security below e.g. subqueries disregards user ID changesCVE-2024-10976Postgresql · CVSS 4.2 · 0.8% likely

    Postgresql

  2. When cache is enabled, some passdb/userdb drivers incorrectly cache all users with same cache key, causing wrong cached information to be used for these users. After cached login,…CVE-2025-30189Open-Xchange GmbH · CVSS 7.4 · 0.6% likely

    Open-Xchange GmbH

  3. Junos OS: QFX5k Series, EX46xx Series: MAC limiting feature stops working after PFE restart or device rebootCVE-2023-22405Juniper Networks · CVSS 6.5 · 0.3% likely

    Juniper Networks

  4. PostgreSQL MERGE can place the wrong row in a trigger transition tableCVE-2026-116312PostgreSQL · CVSS 5.4 · 0.3% likely
  5. PostgreSQL row security caching disregards role modificationsCVE-2026-14666Postgresql · CVSS 4.2 · 0.2% likely

    Postgresql

  6. In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.CVE-2025-32899KDE · CVSS 4.3 · 0.2% likely

    KDE

  7. Junos OS: EX2300 and EX3400 Series: One of more SFPs might become unavailable when the system is very busyCVE-2022-22234Juniper Networks · CVSS 5.5 · 0.2% likely

    Juniper Networks

  8. Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor t…CVE-2026-28249AMD · CVSS 4.6 · 0.2% likely

    AMD

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in