Bash

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. The redirection implementation in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and application crash…CVE-2014-7186Gnu · 64% likely

   CWE-119

2. GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code or cau…CVE-2014-6277Gnu · 64% likely

   CWE-78

3. Off-by-one error in the read_token_word function in parse.y in GNU Bash through 4.3 bash43-026 allows remote attackers to cause a denial of service (out-of-bounds array access and…CVE-2014-7187Gnu · 58% likely

   CWE-119

4. The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine.CVE-2016-0634Gnu · 6.0% likely

   CWE-78

5. An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop…CVE-2019-18276Gnu · CVSS 7.8 · 2.6% likely

   CWE-273

6. The prompt parsing in bash allows a local user to execute commands as another user by creating a directory with the name of the command to execute.CVE-1999-0491Gnu · 0.9% likely

   CWE-94

7. The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows loc…CVE-2010-0002Gnu · 0.7% likely

   CWE-20

8. Bash before 4.4 allows local users to execute arbitrary commands with root privileges via crafted SHELLOPTS and PS4 environment variables.CVE-2016-7543Gnu · 0.6% likely

   CWE-20

9. A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LC_CTYPE environment variable, are printed through…CVE-2012-6711Gnu · CVSS 7 · 0.5% likely

   CWE-119

10. The path autocompletion feature in Bash 4.4 allows local users to gain privileges via a crafted filename starting with a " (double quote) character and a command substitution meta…CVE-2017-5932Gnu · 0.4% likely

    CWE-20

11. popd in bash might allow local users to bypass the restricted shell and cause a use-after-free via a crafted address.CVE-2016-9401Gnu · CVSS 6.2 · 0.4% likely

    CWE-416

12. Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd,…CVE-2012-3410Gnu · 0.4% likely

    CWE-119

13. rbash in Bash before 4.4-beta2 did not prevent the shell user from modifying BASH_CMDS, thus allowing the user to execute any command with the permissions of the shell.CVE-2019-9924Gnu · 0.4% likely

    CWE-862

14. A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems.CVE-2022-3715Gnu · CVSS 7.8 · 0.4% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.