Input Validation and Logic

Every one of the 370 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read…CVE-2013-6282Linux · CVSS 8.8 · 40% likely

   CWE-20

2. The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addre…CVE-2010-3904Linux · CVSS 7.8 · 16% likely

   CWE-1284

3. tls: fix handling of zero-length records on the rx_listCVE-2025-39682Linux · CVSS 9.8 · 3.3% likelycovered by CyberSIXT

   CWE-7543 articles

4. An issue was discovered in net/tipc/crypto.c in the Linux kernel before 5.14.16. The Transparent Inter-Process Communication (TIPC) functionality allows remote attackers to exploi…CVE-2021-43267Linux · 58% likely

   CWE-1284

5. The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system cal…CVE-2014-0038Linux · 35% likely

   CWE-20

6. The sctp_process_unk_param function in net/sctp/sm_make_chunk.c in the Linux kernel 2.6.33.3 and earlier, when SCTP is enabled, allows remote attackers to cause a denial of servic…CVE-2010-1173Linux · 21% likely

   CWE-20

7. The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.22 does not properly validate the hop-by-hop IPv6 extended header, which allows remote attackers t…CVE-2007-4567Linux · 14% likely

   CWE-20

8. net/netfilter/nf_conntrack_proto_dccp.c in the Linux kernel through 3.13.6 uses a DCCP header pointer incorrectly, which allows remote attackers to cause a denial of service (syst…CVE-2014-2523Linux · 10% likely

   CWE-20

9. An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP locatio…CVE-2019-5108Linux · CVSS 7.4 · 10% likely

   CWE-440

10. Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel bef…CVE-2014-4611Linux · 8.9% likely

    CWE-20

11. The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow r…CVE-2011-4914Linux · 8.7% likely

    CWE-20

12. Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.CVE-2020-12351Linux · 7.8% likely

    CWE-20

13. The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system crash) via a malformed ASCONF chunk, related to net/sctp/sm…CVE-2014-3673Linux · 7.5% likely

    CWE-20

14. SCTP in Linux kernel before 2.6.16.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a chunk length that is inconsistent with…CVE-2006-1858Linux · 6.4% likely

    CWE-20

15. The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related…CVE-2017-7645Linux · 5.9% likely

    CWE-20

16. drivers/net/r8169.c in the r8169 driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows remote at…CVE-2009-4537Linux · 5.9% likely

    CWE-20

17. The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows remote attackers to cause a denial of s…CVE-2016-9919Linux · 5.7% likely

    CWE-20

18. The sctp_packet_config function in net/sctp/output.c in the Linux kernel before 2.6.35.6 performs extraneous initializations of packet data structures, which allows remote attacke…CVE-2010-3432Linux · 5.5% likely

    CWE-20

19. net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain iptables rule sets for the SCTP, DCCP,…CVE-2014-8160Linux · 5.5% likely

    CWE-20

20. The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are n…CVE-2005-0449Linux · 4.6% likely

    CWE-20

21. The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remot…CVE-2011-4913Linux · 4.1% likely

    CWE-20

22. Linux Linux kernel version at least v4.8 onwards, probably well before contains a Insufficient input validation vulnerability in bnx2x network card driver that can result in DoS:…CVE-2018-1000026Linux · 4.1% likely

    CWE-20

23. Array index error in the __sock_diag_rcv_msg function in net/core/sock_diag.c in the Linux kernel before 3.7.10 allows local users to gain privileges via a large family value in a…CVE-2013-1763Linux · 4.1% likely

    CWE-20

24. fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an…CVE-2010-2248Linux · 4.0% likely

    CWE-20

25. The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP display driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions fo…CVE-2014-4323Linux · 4.0% likely

    CWE-20

26. The pppol2tp_recvmsg function in drivers/net/pppol2tp.c in the Linux kernel 2.6 before 2.6.26-rc6 allows remote attackers to cause a denial of service (kernel heap memory corrupti…CVE-2008-2750Linux · 3.8% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.