Information Disclosure

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. The _unix_run_helper_binary function in the pam_unix module in Linux-PAM (aka pam) before 1.2.1, when unable to directly access passwords, allows local users to enumerate username…CVE-2015-3238Linux-Pam · 2.7% likely

   CWE-200

2. Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password ComparisonCVE-2026-54411Linux-PAM · CVSS 5.9 · 0.3% likely

   CWE-208

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.