Input Validation and Logic

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS context object corruption in prvSetupConnection and GGD_Secur…CVE-2018-16528Amazon · 3.3% likely

   CWE-20

2. Amazon Elastic Load Balancing API Tools does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certi…CVE-2012-5781Amazon · 0.7% likely

   CWE-20

3. Amazon Flexible Payments Service (FPS) PHP Library does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the…CVE-2012-5782Amazon · 0.6% likely

   CWE-20

4. The Amazon merchant SDK does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which al…CVE-2012-5780Amazon · 0.6% likely

   CWE-20

5. Denial of Service issue in Amazon.IonDotnetCVE-2025-11573Amazon · CVSS 7.5 · 0.4% likely

   CWE-1286

6. An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-serverCVE-2026-85787Amazon · CVSS 6.5 · 0.3% likely

   CWE-184

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.