Coreutils

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. The parse_datetime function in GNU coreutils allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted date string, as demonstr…CVE-2014-9471Gnu · 7.1% likely
2. Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to cause a denial of service (application crash) or possibly h…CVE-2015-4042Gnu · 2.3% likely

   CWE-190

3. The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculation without considering the number of bytes occupied by mult…CVE-2015-4041Gnu · 0.5% likely

   CWE-787

4. Coreutils: heap overflow in split --line-bytes with very long linesCVE-2024-0684Gnu · CVSS 5.5 · 0.5% likely

   CWE-122

5. chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's…CVE-2016-2781Gnu · CVSS 4.6 · 0.4% likely

   CWE-20

6. The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.CVE-2009-4135Gnu · 0.4% likely

   CWE-59

7. In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows lo…CVE-2017-18018Gnu · CVSS 7.1 · 0.3% likely

   CWE-362

8. The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account na…CVE-2008-1946Gnu · 0.3% likely

   CWE-264

9. fts.c in coreutils 8.4 allows local users to delete arbitrary files.CVE-2015-1865Gnu · CVSS 5.1 · 0.3% likely

   CWE-367

10. Heap-based Buffer Overflow in GNU coreutilsCVE-2026-56392GNU · CVSS 1.8 · 0.2% likely

    CWE-122

11. Out‑of‑bounds Read in GNU coreutilsCVE-2026-56391GNU · CVSS 4.6 · 0.1% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.