Skip to content
BackEsc
Sign in

CWE-829 · weakness in Supply Chain and Malicious Code

Inclusion of Functionality from Untrusted Control Sphere

314 CVEs · 3 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
3
check available
5
likely to be exploited
3

Every one of the 314 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()CVE-2026-0770Langflow · CVSS 9.8 · 63% likelycovered by CyberSIXT

    Langflow

  2. Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.CVE-2025-32463Sudo project · CVSS 9.3 · 56% likely

    Sudo project

  3. Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the…CVE-2026-111357Ivanti · CVSS 7 · 0.5% likelycovered by CyberSIXT

    IvantiUTA05768 articles

  4. Cuppa CMS v1.0 - Local File InclusionCVE-2022-2548610% likely
  5. SAS/Internet 9.4 1520 - Local File InclusionCVE-2021-415698.0% likely
  6. Cuppa CMS v1.0 - Local File InclusionCVE-2022-254858.0% likely
  7. CuppaCMS v1.0 - Local File InclusionCVE-2022-341213.9% likely
  8. Cuppa CMS v1.0 - Authenticated Local File InclusionCVE-2022-371913.3% likely
  9. Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirectCVE-2024-38476Apache Software Foundation · CVSS 9.8 · 42% likely

    Apache

  10. The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user v…CVE-2020-1615236% likely
  11. An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by defaul…CVE-2024-29073Ankitects · CVSS 5.3 · 12% likely

    Ankitects

  12. Apache CXF 2.0.x before 2.0.13, 2.1.x before 2.1.10, and 2.2.x before 2.2.9, as used in Apache ServiceMix, Apache Camel, Apache Chemistry, Apache jUDDI, Apache Geronimo, and other…CVE-2010-20769.8% likely
  13. An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerabili…CVE-2018-8351Microsoft · 8.4% likely

    Microsoft

  14. PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code…CVE-2004-02857.8% likely
  15. PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitr…CVE-2004-00307.3% likely
  16. ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files located in th…CVE-2020-3794Adobe · 7.1% likely

    Adobe

  17. ICSA-22-090-05 Rockwell Automation Logix ControllersCVE-2022-1161Rockwell Automation · CVSS 10 · 5.2% likely

    Rockwell Automation

  18. (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6CVE-2021-30121CVSS 6.5 · 5.0% likely
  19. The paranoid2 gem 1.1.6 for Ruby, as distributed on RubyGems.org, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.1.…CVE-2019-135894.3% likely
  20. In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the conten…CVE-2022-298454.2% likely
  21. A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection agai…CVE-2017-6381Drupal · 3.9% likely

    Drupal

  22. The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed…CVE-2017-5397Mozilla · 3.6% likely

    Mozilla

  23. Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON w…CVE-2018-11040Pivotal · 3.2% likely

    Pivotal

  24. IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who can access a valid CA endpoint…CVE-2020-4561IBM · CVSS 10 · 2.9% likely

    IBM

  25. Gallery Plugin1.4 for WordPress has a Remote File Include VulnerabilityCVE-2012-4919Gallery Plugin authors · 2.9% likely
  26. Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via c…CVE-2020-139772.7% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in