No weakness recorded

Every one of the 9,921 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows…CVE-2019-13272Linux · CVSS 7.8 · 52% likelycovered by CyberSIXT
2. The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain pri…CVE-2014-3153Linux · CVSS 7.8 · 37% likely
3. ksmbd: validate session id and tree id in compound requestCVE-2023-52442Linux · CVSS 9.1 · 30% likely
4. The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack v…CVE-2006-2444Linux · 23% likely
5. Multiple vulnerabilities in the IGMP functionality for Linux kernel 2.4.22 to 2.4.28, and 2.6.x to 2.6.9, allow local and remote attackers to cause a denial of service or execute…CVE-2004-1137Linux · 21% likely
6. ipv6: mcast: add RCU protection to mld_newpack()CVE-2025-21758Linux · CVSS 7.8 · 17% likely
7. Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that…CVE-2006-3468Linux · 16% likely
8. drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause…CVE-2015-8812Linux · 15% likely
9. The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial of service (crash) via an AppleTalk fra…CVE-2007-1357Linux · 14% likely
10. Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to cause a denial of service or corrupt memory via a crafted file…CVE-2005-0815Linux · 13% likely
11. The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface…CVE-2010-0437Linux · 12% likely
12. The "capabilities" feature in Linux before 2.2.16 allows local users to cause a denial of service or gain privileges by setting the capabilities to prevent a setuid program from d…CVE-2000-0506Linux · 11% likely
13. tls: make sure to abort the stream if headers are bogusCVE-2025-39946Linux · CVSS 9.8 · 11% likely
14. Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative si…CVE-2003-0619Linux · 11% likely
15. ip_conntrack_ftp in the IPTables firewall for Linux 2.4 allows remote attackers to bypass access restrictions for an FTP server via a PORT command that lists an arbitrary IP addre…CVE-2001-0405Linux · 10% likely
16. The replace_map_fd_with_map_ptr function in kernel/bpf/verifier.c in the Linux kernel before 4.5.5 does not properly maintain an fd data structure, which allows local users to gai…CVE-2016-4557Linux · 10% likely
17. Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab…CVE-2015-1421Linux · 9.8% likely
18. nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queu…CVE-2022-36946Linux · CVSS 7.5 · 8.9% likely
19. drivers/net/e1000e/netdev.c in the e1000e driver in the Linux kernel 2.6.32.3 and earlier does not properly check the size of an Ethernet frame that exceeds the MTU, which allows…CVE-2009-4538Linux · 8.4% likely
20. The route cache implementation in Linux 2.4, and the Netfilter IP conntrack module, allows remote attackers to cause a denial of service (CPU consumption) via packets with forged…CVE-2003-0244Linux · 7.7% likely
21. An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerab…CVE-2020-26147Linux · 7.6% likely

    1 bounty report

22. IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules…CVE-1999-1018Linux · 7.2% likely
23. In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection.CVE-1999-0414Linux · 6.9% likely
24. Linux 2.2.3 and earlier allow a remote attacker to perform an IP fragmentation attack, causing a denial of service.CVE-1999-0431Linux · 6.6% likely
25. An issue was discovered in write_tpt_entry in drivers/infiniband/hw/cxgb4/mem.c in the Linux kernel through 5.3.2. The cxgb4 driver is directly calling dma_map_single (a DMA funct…CVE-2019-17075Linux · 6.5% likely
26. A system does not present an appropriate legal message or warning to a user who is accessing it.CVE-1999-0590Linux · 6.0% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.