Information Disclosure

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. The std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4 does not properly handle short reads from blocking sources, which makes it easier f…CVE-2015-5276Gnu · 2.9% likely

   CWE-200

2. Emacs 24.4 allows remote attackers to bypass security restrictions.CVE-2014-9483Gnu · 2.9% likely

   CWE-200

3. stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction se…CVE-2018-12886Gnu · 2.7% likely

   CWE-209

4. CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate hist…CVE-2004-0778Gnu · 2.4% likely

   CWE-203

5. The mpi_powm function in Libgcrypt before 1.6.3 and GnuPG before 1.4.19 allows attackers to obtain sensitive information by leveraging timing differences when accessing a pre-comp…CVE-2015-0837GNU · 2.0% likely

   CWE-203

6. An issue was discovered in the GNU C Library (glibc) 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the…CVE-2022-39046Gnu · CVSS 7.5 · 1.9% likely

   CWE-532

7. GnuTLS incorrectly validates the first byte of padding in CBC modesCVE-2015-8313Gnu · 1.7% likely

   CWE-203

8. Certain run-time memory protection mechanisms in the GNU C Library (aka glibc or libc6) print argv[0] and backtrace information, which might allow context-dependent attackers to o…CVE-2010-3192Gnu · 1.6% likely

   CWE-200

9. A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphe…CVE-2023-0361Gnu · CVSS 7.4 · 1.5% likely

   CWE-203

10. phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated…CVE-2011-3771Gnu · 1.2% likely

    CWE-200

11. set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extended attributes of the downloaded file,…CVE-2018-20483Gnu · 0.7% likely

    CWE-200

12. Libgcrypt before 1.6.3 and GnuPG before 1.4.19 does not implement ciphertext blinding for Elgamal decryption, which allows physically proximate attackers to obtain the server's pr…CVE-2014-3591GNU · 0.6% likely

    CWE-200

13. A Bleichenbacher type side-channel based padding oracle attack was found in the way gnutls handles verification of RSA decrypted PKCS#1 v1.5 data. An attacker who is able to run p…CVE-2018-16868Gnu · CVSS 4.7 · 0.6% likely

    CWE-203

14. GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FILENAME]~") resulting in files that may be world readable or…CVE-2017-1000383Gnu · 0.4% likely

    CWE-200

15. GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.CVE-2024-56738GNU · CVSS 5.3 · 0.4% likely

    CWE-208

16. unix_random.c in lshd for lsh 2.0.1 leaks file descriptors related to the randomness generator, which allows local users to cause a denial of service by truncating the seed file,…CVE-2006-0353Gnu · 0.4% likely

    CWE-200

17. Grub Legacy 0.97 and earlier stores pre-boot authentication passwords in the BIOS Keyboard buffer and does not clear this buffer before and after use, which allows local users to…CVE-2008-3896Gnu · 0.3% likely

    CWE-200

18. An issue was discovered in Mailman Core before 3.3.5. An attacker with access to the REST API could use timing attacks to determine the value of the configured REST API password a…CVE-2021-34337Gnu · CVSS 6.3 · 0.3% likely

    CWE-208

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.