Input Validation and Logic

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.CVE-2017-14696Saltstack · 3.8% likely

   CWE-20

2. The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via…CVE-2013-4436Saltstack · 1.8% likely

   CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.