File and Path Handling

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspeci…CVE-2014-8741Lexmark · 77% likely

   CWE-22

2. In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local f…CVE-2019-16758Lexmark · 17% likely

   CWE-22

3. Directory traversal vulnerability in the ReportDownloadServlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to read arbitrary files via unspecified…CVE-2014-8742Lexmark · 4.4% likely

   CWE-22

4. Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary file…CVE-2014-9375Lexmark · 3.2% likely

   CWE-22

5. Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. (CVE-2016-6918Lexmark · CVSS 10 · 1.9% likely

   CWE-434

6. Certain older Lexmark devices (C, M, X, and 6500e before 2018-12-18) contain a directory traversal vulnerability in the embedded web server.CVE-2018-18894Lexmark · 1.7% likely

   CWE-22

7. PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.CVE-2021-44737Lexmark · 1.5% likely

   CWE-22

8. Relative path traversal vulnerability in Embedded Solutions FrameworkCVE-2025-65077Lexmark · CVSS 8.8 · 0.7% likely

   CWE-22

9. Untrusted search path vulnerability in Embedded Solutions FrameworkCVE-2025-65078Lexmark · CVSS 9.3 · 0.6% likely

   CWE-426

10. Combination Path Traversal and Concurrent Execution vulnerability exists within the embedded web serverCVE-2025-1127Lexmark · CVSS 9.1 · 0.5% likely

    CWE-22

11. The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path.CVE-2021-35469Lexmark · 0.2% likely

    CWE-428

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.