Input Validation and Logic

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof…CVE-2020-13401Docker · 2.9% likely

   CWE-20

2. Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 does not properly validate and extract the manifest object from its JSON representation during a pull, which allow…CVE-2014-8179Docker · 2.7% likely

   CWE-20

3. Docker before 1.3.3 does not properly validate image IDs, which allows remote attackers to conduct path traversal attacks and spoof repositories via a crafted image in a (1) "dock…CVE-2014-9358Docker · 2.5% likely

   CWE-20

4. Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remot…CVE-2017-14992Docker · 2.5% likely

   CWE-20

5. Docker before 1.3 does not properly validate image IDs, which allows remote attackers to redirect to another image through the loading of untrusted images via 'docker load'.CVE-2014-5282Docker · 1.3% likely

   CWE-20

6. Docker Engine before 1.8.3 and CS Docker Engine before 1.6.2-CS7 do not use a globally unique identifier to store image layers, which makes it easier for attackers to poison the i…CVE-2014-8178Docker · 0.5% likely

   CWE-20

7. Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build viewCVE-2024-9348Docker · CVSS 8.9 · 0.5% likely

   CWE-20

8. Docker Sandboxes OAuth response masking could be bypassed with a case-variant token hostCVE-2026-105570Docker · CVSS 6.7 · 0.1% likely

   CWE-178

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.