CWE-606 · 36 records
Unchecked Input for Loop Condition
CVEs in this class
36 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2026-13761No exploit | Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial pegasystems · pega infinity · CWE-606 | High8.8 | — | 0.2% | Aug 28, 2026 |
34Monitor | CVE-2026-20301No exploit | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerabilitycisco · ios · CWE-606 | High8.6 | — | 0.5% | Aug 5, 2026 |
32Monitor | CVE-2026-85730No exploit | smol-toml: Denial of Service via malformed TOML documentssquirrelchat · smol-toml · CWE-606 | High8.2 | — | 0.5% | Sep 4, 2026 |
30Monitor | CVE-2026-1519No exploit | Excessive NSEC3 iterations cause high CPU load during insecure delegation validationisc · bind · CWE-606 | High7.5 | — | 1.5% | Mar 25, 2026 |
30Monitor | CVE-2026-62901No exploit | .NET Denial of Service Vulnerabilitymicrosoft · visual studio 2022 · CWE-606 | High7.5 | — | 1.2% | Aug 11, 2026 |
30Monitor | CVE-2022-3252No exploit | Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received Happle · swift-nio-extras · CWE-606 | High7.5 | — | 0.8% | Sep 21, 2022 |
30Monitor | CVE-2024-34486No exploit | OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.facuet · ryu · CWE-606 | High7.5 | — | 0.6% | May 4, 2024 |
30Monitor | CVE-2026-27689No exploit | Denial of service (DOS) in SAP Supply Chain Managementsap_se · sap supply chain management · CWE-606 | High7.7 | — | 0.5% | Mar 10, 2026 |
30Monitor | CVE-2025-32399No exploit | An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library rt-labs · p-net · CWE-606 | High7.5 | — | 0.4% | May 7, 2025 |
30Monitor | CVE-2024-13931No exploit | Authenticated Relative Path Traversalabb · aspect-enterprise · CWE-606 | High7.5 | — | 0.4% | May 22, 2025 |
30Monitor | CVE-2026-23689No exploit | Denial of service (DOS) in SAP Supply Chain Managementsap · advanced planning and optimization · CWE-606 | High7.7 | — | 0.4% | Feb 10, 2026 |
28Monitor | CVE-2026-33800No exploit | Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crashjuniper · junos · CWE-606 | High7.1 | — | 0.2% | Jul 9, 2026 |
28Monitor | CVE-2026-16652No exploit | Temporal Server Schedule exclusion search can cause excessive CPU consumptiontemporal technologies, inc. · temporal server · CWE-606 | High7.1 | — | 0.2% | Sep 21, 2026 |
27Monitor | CVE-2025-43801No exploit | Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Lliferay · digital experience platform · CWE-606 | Medium6.9 | — | 0.4% | Sep 16, 2025 |
27Monitor | CVE-2019-25624No exploit | Liquid Studio 2.17 Denial of Service via Malformed Inputpixarra · liquid studio · CWE-606 | Medium6.9 | — | 0.1% | Mar 23, 2026 |
26Monitor | CVE-2026-68077No exploit | Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of serviceapache · qpid broker-j · CWE-606 | Medium6.5 | — | 0.6% | Aug 5, 2026 |
26Monitor | CVE-2026-66276No exploit | Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of serviceapache · qpid proton-j · CWE-606 | Medium6.5 | — | 0.6% | Aug 5, 2026 |
26Monitor | CVE-2026-67554No exploit | Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of serviceapache · qpid proton-dotnet · CWE-606 | Medium6.5 | — | 0.6% | Aug 5, 2026 |
26Monitor | CVE-2026-27145Proof of concept | Inefficient candidate hostname parsing in crypto/x509go standard library · crypto/x509 · CWE-606 | Medium6.5 | — | 0.5% | Jun 2, 2026 |
26Monitor | CVE-2026-55731No exploit | Loytec LINX firmware: Unchecked input for loop condition in the SNMP agentloytec · lip-me20xc · CWE-606 | Medium6.6 | — | 0.5% | Jul 24, 2026 |
26Monitor | CVE-2025-42930No exploit | Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidationsap_se · sap business planning and consolidation · CWE-606 | Medium6.5 | — | 0.3% | Sep 8, 2025 |
24Monitor | CVE-2023-6237No exploit | Excessive time spent checking invalid RSA public keysopenssl · openssl · CWE-606 | Medium5.9 | — | 2.3% | Apr 25, 2024 |
23Monitor | CVE-2023-3446No exploit | Excessive time spent checking DH keys and parametersopenssl · openssl · CWE-606 | Medium5.3 | — | 6.5% | Jul 19, 2023 |
23Monitor | CVE-2024-13930No exploit | Authenticated Unchecked Loop Conditionabb · aspect-enterprise · CWE-606 | Medium5.9 | — | 0.3% | May 22, 2025 |
22Monitor | CVE-2023-5678No exploit | Excessive time spent in DH check / generation with large Q parameter valueopenssl · openssl · CWE-606 | Medium5.3 | — | 4.4% | Nov 6, 2023 |
- CVE-2026-1376135Monitor
Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of inputs that are used for loop conditions, potentially leading to a denial
HighCVSS 8.8No exploitEPSS 0%pegasystems · pega infinityAug 28, 2026
- CVE-2026-2030134Monitor
Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%cisco · iosAug 5, 2026
- CVE-2026-8573032Monitor
smol-toml: Denial of Service via malformed TOML documents
HighCVSS 8.2No exploitEPSS 0%squirrelchat · smol-tomlSep 4, 2026
- CVE-2026-151930Monitor
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
HighCVSS 7.5No exploitEPSS 1%isc · bindMar 25, 2026
- CVE-2026-6290130Monitor
.NET Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 1%microsoft · visual studio 2022Aug 11, 2026
- CVE-2022-325230Monitor
Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received H
HighCVSS 7.5No exploitEPSS 0%apple · swift-nio-extrasSep 21, 2022
- CVE-2024-3448630Monitor
OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.
HighCVSS 7.5No exploitEPSS 0%facuet · ryuMay 4, 2024
- CVE-2026-2768930Monitor
Denial of service (DOS) in SAP Supply Chain Management
HighCVSS 7.7No exploitEPSS 0%sap_se · sap supply chain managementMar 10, 2026
- CVE-2025-3239930Monitor
An Unchecked Input for Loop Condition in RT-Labs P-Net version 1.0.1 or earlier allows an attacker to cause IO devices that use the library
HighCVSS 7.5No exploitEPSS 0%rt-labs · p-netMay 7, 2025
- CVE-2024-1393130Monitor
Authenticated Relative Path Traversal
HighCVSS 7.5No exploitEPSS 0%abb · aspect-enterpriseMay 22, 2025
- CVE-2026-2368930Monitor
Denial of service (DOS) in SAP Supply Chain Management
HighCVSS 7.7No exploitEPSS 0%sap · advanced planning and optimizationFeb 10, 2026
- CVE-2026-3380028Monitor
Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
HighCVSS 7.1No exploitEPSS 0%juniper · junosJul 9, 2026
- CVE-2026-1665228Monitor
Temporal Server Schedule exclusion search can cause excessive CPU consumption
HighCVSS 7.1No exploitEPSS 0%temporal technologies, inc. · temporal serverSep 21, 2026
- CVE-2025-4380127Monitor
Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and L
MediumCVSS 6.9No exploitEPSS 0%liferay · digital experience platformSep 16, 2025
- CVE-2019-2562427Monitor
Liquid Studio 2.17 Denial of Service via Malformed Input
MediumCVSS 6.9No exploitEPSS 0%pixarra · liquid studioMar 23, 2026
- CVE-2026-6807726Monitor
Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%apache · qpid broker-jAug 5, 2026
- CVE-2026-6627626Monitor
Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%apache · qpid proton-jAug 5, 2026
- CVE-2026-6755426Monitor
Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
MediumCVSS 6.5No exploitEPSS 0%apache · qpid proton-dotnetAug 5, 2026
- CVE-2026-2714526Monitor
Inefficient candidate hostname parsing in crypto/x509
MediumCVSS 6.5Proof of conceptEPSS 0%go standard library · crypto/x509Jun 2, 2026
- CVE-2026-5573126Monitor
Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
MediumCVSS 6.6No exploitEPSS 0%loytec · lip-me20xcJul 24, 2026
- CVE-2025-4293026Monitor
Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
MediumCVSS 6.5No exploitEPSS 0%sap_se · sap business planning and consolidationSep 8, 2025
- CVE-2023-623724Monitor
Excessive time spent checking invalid RSA public keys
MediumCVSS 5.9No exploitEPSS 2%openssl · opensslApr 25, 2024
- CVE-2023-344623Monitor
Excessive time spent checking DH keys and parameters
MediumCVSS 5.3No exploitEPSS 6%openssl · opensslJul 19, 2023
- CVE-2024-1393023Monitor
Authenticated Unchecked Loop Condition
MediumCVSS 5.9No exploitEPSS 0%abb · aspect-enterpriseMay 22, 2025
- CVE-2023-567822Monitor
Excessive time spent in DH check / generation with large Q parameter value
MediumCVSS 5.3No exploitEPSS 4%openssl · opensslNov 6, 2023