Patch

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of t…CVE-2015-1395Gnu · 11% likely

   CWE-22

2. An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer dereference, leading to a denial of service in the intuit_diff_ty…CVE-2018-6951Gnu · 8.4% likely

   CWE-476

3. A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.CVE-2018-6952Gnu · 8.2% likely

   CWE-415

4. GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.CVE-2015-1196Gnu · 6.1% likely

   CWE-59

5. GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR_PROGRAM invocation (using ed) can result in code execution.…CVE-2018-1000156Gnu · 5.3% likely

   CWE-20

6. GNU patch through 2.7.6 is vulnerable to OS shell command injection that can be exploited by opening a crafted patch file that contains an ed style diff payload with shell metacha…CVE-2019-13638Gnu · 4.5% likely

   CWE-78

7. In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c.CVE-2019-13636Gnu · 3.9% likely

   CWE-59

8. A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exi…CVE-2015-1396Gnu · 3.3% likely

   CWE-22

9. do_ed_script in pch.c in GNU patch through 2.7.6 does not block strings beginning with a ! character. NOTE: this is the same commit as for CVE-2019-13638, but the ! syntax is spec…CVE-2018-20969Gnu · 2.7% likely

   CWE-78

10. GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted diff file.CVE-2014-9637Gnu · 2.4% likely

    CWE-399

11. An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly lead to DoS via a crafted input file.CVE-2016-10713Gnu · 1.6% likely

    CWE-119

12. GNU patch through 2.7.6 contains a free(p_line[p_end]) Double Free vulnerability in the function another_hunk in pch.c that can cause a denial of service via a crafted patch file.…CVE-2019-20633Gnu · 1.0% likely

    CWE-415

13. An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.CVE-2021-45261Gnu · 0.8% likely

    CWE-763

14. Loop with Unreachable Exit Condition in GNU patchCVE-2026-56289GNU · CVSS 4.6 · 0.1% likely

    CWE-835

15. NULL Pointer Dereference in GNU patchCVE-2026-56288GNU · CVSS 4.6 · 0.1% likely

    CWE-476

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.