CWE-1395 · weakness in Supply Chain and Malicious Code
Dependency on Vulnerable Third-Party Component
52 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 1
Every one of the 52 is a mark on the map. Named now: 1 to 26, most at risk first.
- NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability
- pdoc embeds link to malicious CDN if math mode is enabled
- Azure SDK Spoofing Vulnerability
- GFI Archiver Telerik Web UI Remote Code Execution Vulnerability
- Intumit inc. SmartRobot - Remote Code Execution
- GitHub: Zero Shot SCFoundation Remote Code Execution Vulnerability
- Vasion Print (formerly PrinterLogic) Use of Outdated, End-Of-Life, and Vulnerable Third-Party Components
- Dependency on Vulnerable Third-Party Component in GitLab
- Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
- FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library
- IO::Compress::Brotli versions prior to 0.007 for Perl have an integer overflow in the bundled Brotli C library
- Image::WebP versions before 0.3.0 for Perl bundle a vulnerable version of libwebp
- BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities
- PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities
- Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
- Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
- XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder
- Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt
- Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow
- Adobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)
- HarfBuzz::Shaper versions before 0.032 for Perl contains a bundled library with a null pointer dereference vulnerability
- UnQLite versions through 0.06 for Perl uses a potentially insecure version of the UnQLite library
- Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.…
- CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode
- Archive::Unzip::Burst from 0.01 through 0.09 for Perl contains a bundled InfoZip library that is affected by several vulnerabilities
- Unauthenticated Path Traversal affecting Avid NEXIS
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.