Skip to content

CWE-371 · weakness in Other weaknesses

State Issues

10 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Cisco IP Phone TCP Packet Flood Denial of Service VulnerabilityCVE-2020-3574Cisco · CVSS 7.5 · 8.0% likely

    Cisco

  2. Cisco IOS and IOS XE Software TCP Denial of Service VulnerabilityCVE-2018-0282Cisco · CVSS 6.8 · 2.0% likely

    Cisco

  3. Cisco IOS and IOS XE Software Secure Shell Denial of Service VulnerabilityCVE-2020-3200Cisco · CVSS 7.7 · 1.7% likely

    Cisco

  4. Cisco Nexus 9000 Series Fabric Switches ACI Mode Border Leaf Endpoint Learning VulnerabilityCVE-2019-1977Cisco · CVSS 6.8 · 1.5% likely

    Cisco

  5. Cisco IOS XE Software IP Service Level Agreements Denial of Service VulnerabilityCVE-2020-3422Cisco · CVSS 8.6 · 1.3% likely

    Cisco

  6. A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) component of Cisco IOS XE Software in controller mode could allow an unaut…CVE-2024-20455Cisco · CVSS 8.6 · 0.7% likely

    Cisco

  7. Cisco SD-WAN vEdge Routers Denial of Service VulnerabilityCVE-2020-3385Cisco · CVSS 7.4 · 0.5% likely

    Cisco

  8. Linux Foundation Magma NGSetup ngap_amf_handlers.c state issueCVE-2026-82551Linux Foundation · CVSS 5.3 · 0.5% likely

    Linuxfoundation

  9. fushengqian fuint ClientOrderController.java receipt state issueCVE-2026-124567fushengqian · CVSS 4.3 · 0.2% likely

    Fushengqian

  10. HdrHistogram AbstractHistogram AbstractHistogram.java recordValueWithCount state issueCVE-2026-14685HdrHistogram · CVSS 3.3 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.