Skip to content

CWE-417 · weakness in Other weaknesses

Communication Channel Errors

12 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Crypto++ 8.3.0 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or remote attacker, able to measure the duration of hundreds to thousa…CVE-2019-14318Cryptopp · 3.1% likely

    Cryptopp

  2. Windows 8.3 path equivalence handling flaw allows LibreLogo script executionCVE-2019-9855Document Foundation · 3.0% likely

    The Document Foundation

  3. The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are not link-local, which allows remote att…CVE-2017-6520Bose · 2.0% likely

    Bose

  4. An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consider URL path parameters when processing…CVE-2016-9879Ibm · 1.5% likely

    IBM

  5. Arista EOS before 4.20.2F allows remote BGP peers to cause a denial of service (Rib agent restart) via a malformed path attribute in an UPDATE message.CVE-2018-5254Arista · 1.2% likely

    Arista

  6. October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server.CVE-2017-1000197Octobercms · 1.2% likely

    Octobercms

  7. S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed pac…CVE-2017-2712Huawei Technologies Co., Ltd. · 1.1% likely

    Huawei

  8. On EPSON WF-2750 printers with firmware JP02I2, there is no filtering of print jobs. Remote attackers can send print jobs directly to the printer via TCP port 9100.CVE-2018-14900Epson · 1.1% likely

    Epson

  9. In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded desc…CVE-2017-8822Tor Project · 0.9% likely

    Tor

  10. SB10192 - Network Security Management (NSM) - Abuse of communication channels vulnerabilityCVE-2017-3969McAfee · CVSS 8.2 · 0.8% likely

    Mcafee

  11. The Mozilla Windows updater modifies some files to be updated by reading the original file and applying changes to it. The location of the original file can be altered by a malici…CVE-2017-7760Mozilla · 0.4% likely

    Mozilla

  12. The lxc-user-nic component of LXC allows unprivileged users to open arbitrary filesCVE-2018-6556Linuxcontainers · 0.4% likely

    Linuxcontainers

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in