Other weaknesses

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x befo…CVE-2015-2331Php · 27% likely

   CWE-189

2. The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is diffe…CVE-2015-4021Php · 20% likely

   CWE-189

3. Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code…CVE-2015-4022Php · 20% likely

   CWE-189

4. The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character, which might allow remote a…CVE-2015-4026Php · 19% likely

   CWE-19

5. PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations, which allows remote attackers to bypa…CVE-2015-4025Php · 17% likely

   CWE-19

6. The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __default_headers is an array, which allows…CVE-2015-4147Php · 12% likely

   CWE-19

7. Off-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial of service (uninitiali…CVE-2015-7804Php · 8.5% likely

   CWE-189

8. The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (app…CVE-2016-10158Php · 7.8% likely

   CWE-189

9. Integer overflow in the php_raw_url_encode function in ext/standard/url.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to cause a denial…CVE-2016-4070Php · 5.7% likely

   CWE-189

10. Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long…CVE-2016-1904Php · 2.7% likely

    CWE-189

11. libxml streams use wrong content-type header when requesting a redirected resourceCVE-2025-1219PHP Group · CVSS 6.3 · 0.7% likely

    CWE-1116

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.