CWE-1104 · weakness in Supply Chain and Malicious Code
Use of Unmaintained Third Party Components
29 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.
- Remote Code Execution (RCE) Vulnerability
- Azure Storage Movement Client Library Denial of Service Vulnerability
- Kibana Reporting vulnerabilities
- An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.
- Vasion Print (formerly PrinterLogic) Usage of Outdated and Unsupported OpenSSL Version
- TOML::XS versions before 0.06 for Perl bundle an unsupported and vulnerable version of tomlc99
- Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
- Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library
- Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label
- CWE-1104: Use of Unmaintained Third-Party Components vulnerability exists that could cause complete control of the device when an authenticated user installs malicious code into H…
- Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.…
- HHVM 4.172.0 and all prior versions use TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS1.0 has numerous published vulnerabilities and is depr…
- HCL Hive is affected by a use of vulnerable third-party components
- Incorrect Content-Type Header
- Radiflow iSAP Smart Collector Linux distribution unmaintained
- Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection
- Use of End-of-Life components in mH-DEVELOPER
- HP Easy Start for macOS - Security Update
- HCL MyCloud was affected by Using Components with Known Vulnerability
- HCL Traveler for Microsoft Outlook (HTMO) is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service
- Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of pri…
- SolarEdge SE3680H contains Linux Kernel vulnerabilities
- HCL Hive is affected by multiple security vulnerabilities.
- HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery
- Vulnerable Python version used in Forcepoint One DLP Client
- HCL MyXalytics is affected by the use of vulnerable/outdated versions
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.