Information Disclosure

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack.CVE-2016-6883Matrixssl · 14% likely

   CWE-200

2. The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspeci…CVE-2016-8671Matrixssl · 1.3% likely

   CWE-200

3. MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-c…CVE-2016-6882Matrixssl · 1.3% likely

   CWE-200

4. MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to measure the duration of hundreds to tho…CVE-2019-13629Matrixssl · 1.2% likely

   CWE-203

5. The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT a…CVE-2016-6887Matrixssl · 1.1% likely

   CWE-200

6. MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the att…CVE-2018-12439Matrixssl · 0.3% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.