CWE-114 · weakness in File and Path Handling
Process Control
28 CVEs · 1 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.
- mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a…
- Shell Escape in Anchore Engine
- Git vulnerable to Remote Code Execution while cloning special-crafted local repositories
- IBM AIX command execution
- Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed.…
- Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI.…
- IBM AIX command execution
- Windows kube-proxy LoadBalancer contention
- AIX Code Execution
- vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
- osquery susceptible to DLL search order hijacking of zlib1.dll
- AIX Command Execution
- IBM FlashSystem code execution
- TinyWeb: HTTP Header Control Character Injection into CGI Environment
- Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment…
- Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for th…
- Process Control vulnerability in Bitdefender Antivirus Plus
- Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL…
- PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 throu…
- IBM AIX command execution
- Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local p…
- A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify…
- MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths
- GE Digital CIMPLICITY Process Control
- Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10,…
- IBM Hardware Management Console - Power Systems command execution
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.