CWE-573 · weakness in Other weaknesses
Improper Following of Specification by Caller
7 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.
- A vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions where activity creation capabilities were not correctly res…
- Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets…
- BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
- The cstruct package before 6.3.0 for OCaml mishandles indexes.
- ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling
- sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory.
- Snowflake Connector for C/C++ retries malformed requests
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP