Input Validation and Logic

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the followin…CVE-2019-16300Linuxfoundation · 2.0% likely

   CWE-755

2. A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentica…CVE-2020-27847Linuxfoundation · 1.7% likely

   CWE-228

3. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the f…CVE-2019-16302Linuxfoundation · 1.7% likely

   CWE-755

4. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the…CVE-2019-16301Linuxfoundation · 1.7% likely

   CWE-755

5. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following…CVE-2019-16299Linuxfoundation · 1.7% likely

   CWE-755

6. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener do…CVE-2019-16298Linuxfoundation · 1.7% likely

   CWE-755

7. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the foll…CVE-2019-16297Linuxfoundation · 1.7% likely

   CWE-755

8. The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http requ…CVE-2019-1010234The Linux Foundation · 1.7% likely

   CWE-20

9. The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the sw…CVE-2019-1010252The Linux Foundation · 1.0% likely

   CWE-20

10. The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the sw…CVE-2019-1010250The Linux Foundation · 1.0% likely

    CWE-20

11. In the Linux Kernel before version 4.15.8, 4.14.25, 4.9.87, 4.4.121, 4.1.51, and 3.2.102, an error in the "_sctp_make_chunk()" function (net/sctp/sm_make_chunk.c) when handling SC…CVE-2018-5803Linux Foundation · 0.8% likely

    CWE-20

12. Linux Foundation Magma NGSetupRequest input validationCVE-2026-82550Linux Foundation · CVSS 5.3 · 0.7% likely

    CWE-20

13. runc through 1.1.4 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spawn tw…CVE-2023-27561Linuxfoundation · CVSS 7 · 0.4% likely

    CWE-706

14. runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges, related to libcontainer/rootfs_linux.go. To exploit this, an attacker must be able to spaw…CVE-2019-19921Linuxfoundation · 0.4% likely

    CWE-706

15. pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.CVE-2025-55552Linuxfoundation · CVSS 5.3 · 0.4% likely

    CWE-682

16. A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).CVE-2025-55557Linuxfoundation · CVSS 7.5 · 0.4% likely

    CWE-248

17. A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).CVE-2025-55553Linuxfoundation · CVSS 7.5 · 0.4% likely

    CWE-248

18. Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw…CVE-2021-29136Linuxfoundation · 0.3% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.