Misconfiguration and Insecure Design

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. GNU adns 1.4 and earlier uses a fixed source port and sequential transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different v…CVE-2008-4100Gnu · 1.5% likely

   CWE-16

2. The addmntent function in the GNU C Library (aka glibc or libc6) 2.13 and earlier does not report an error status for failed attempts to write to the /etc/mtab file, which makes i…CVE-2011-1089Gnu · 0.4% likely

   CWE-16

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.