Python

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.CVE-2023-24329Python · CVSS 7.5 · 20% likely

   CWE-20

2. Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by cons…CVE-2018-14647The Python Project · CVSS 5.3 · 11% likely

   CWE-665

3. A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 throu…CVE-2019-10160Python · CVSS 9.8 · 5.2% likely

   CWE-172

4. An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' b…CVE-2023-41105Python · 2.6% likely

   CWE-426

5. The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value o…CVE-2023-27043Python · CVSS 5.3 · 2.5% likely

   CWE-1286

6. An issue in Python cpython v.3.7 allows an attacker to obtain sensitive information via the _asyncio._swap_current_task component. NOTE: this is disputed by the vendor because (1)…CVE-2023-38898Python · 1.7% likely
7. The legacy email.utils.parseaddr function in Python through 3.11.4 allows attackers to trigger "RecursionError: maximum recursion depth exceeded while calling a Python object" via…CVE-2023-36632Python · 1.6% likely

   CWE-674

8. An issue was discovered in Python before 3.8.18, 3.9.x before 3.9.18, 3.10.x before 3.10.13, and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use…CVE-2023-40217Python · 0.8% likely
9. CPython v3.12.0 alpha 7 was discovered to contain a heap use-after-free via the function ascii_decode at /Objects/unicodeobject.c.CVE-2023-33595Python · 0.4% likely

   CWE-416

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.