Sendmail

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments…CVE-2002-1337Sendmail · 73% likely

   CWE-120

2. The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2003-0694Sendmail · 66% likely
3. The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length…CVE-2003-0161Sendmail · 39% likely
4. Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp…CVE-2006-0058Sendmail · 29% likely
5. A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has…CVE-2003-0681Sendmail · 22% likely
6. Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header,…CVE-2009-1490Sendmail · 13% likely

   CWE-119

7. Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to pr…CVE-1999-1109Sendmail · 7.2% likely
8. Sendmail before 8.13.7 allows remote attackers to cause a denial of service via deeply nested, malformed multipart MIME messages that exhaust the stack during the recursive mime8t…CVE-2006-1173Sendmail · 5.3% likely

   CWE-399

9. Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed varia…CVE-2006-4434Sendmail · 4.5% likely

   CWE-416

10. Buffer overflow in Sendmail before 8.12.5, when configured to use a custom DNS map to query TXT records, allows remote attackers to cause a denial of service and possibly execute…CVE-2002-0906Sendmail · 4.4% likely
11. The DNS map code in Sendmail 8.12.8 and earlier, when using the "enhdnsbl" feature, does not properly initialize certain data structures, which allows remote attackers to cause a…CVE-2003-0688Sendmail · 3.6% likely
12. sendmail before 8.14.4 does not properly handle a '\0' character in a Common Name (CN) field of an X.509 certificate, which (1) allows man-in-the-middle attackers to spoof arbitra…CVE-2009-4565Sendmail · 2.4% likely

    CWE-310

13. Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when running sendmail 8.11.1; allows remote attackers to cause a d…CVE-2007-2246Sendmail · 2.3% likely

    CWE-399

14. The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain name for e-mail messages that come from exte…CVE-2006-7176Sendmail · 2.1% likely
15. Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.CVE-2002-2261Sendmail · 2.0% likely

    CWE-264

16. The ClamAV Mail fILTER (clamav-milter) 0.84 through 0.85d, when used in Sendmail using long timeouts, allows remote attackers to cause a denial of service by keeping an open conne…CVE-2005-2070Sendmail · 1.7% likely
17. Denial of service in HP-UX sendmail 8.8.6 related to accepting connections.CVE-1999-0478Sendmail · 1.4% likely
18. Sendmail 8.10.0 through 8.11.5, and 8.12.0 beta, allows local users to modify process memory and possibly gain privileges via a large value in the 'category' part of debugger (-d)…CVE-2001-0653Sendmail · 1.2% likely
19. Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT respon…CVE-2002-2423Sendmail · 1.2% likely

    CWE-20

20. SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator)…CVE-1999-1580Sendmail · 1.1% likely
21. Sendmail Consortium's Restricted Shell (SMRSH) in Sendmail 8.12.6, 8.11.6-15, and possibly other versions after 8.11 from 5/19/1998, allows attackers to bypass the intended restri…CVE-2002-1165Sendmail · 1.1% likely
22. sendmail through 8.17.2 allows SMTP smuggling in certain configurations. Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL…CVE-2023-51765Sendmail · 1.1% likely

    CWE-345

23. Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-012…CVE-1999-1592Sendmail · 1.0% likely
24. Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.CVE-2002-1827Sendmail · 0.9% likely
25. The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2 encryption, which could cause less secure cha…CVE-2006-7175Sendmail · 0.9% likely
26. The sm_close_on_exec function in conf.c in sendmail before 8.14.9 has arguments in the wrong order, and consequently skips setting expected FD_CLOEXEC flags, which allows local us…CVE-2014-3956Sendmail · 0.6% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.