sourcegraph

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Code Injection in SourcegraphCVE-2022-23642sourcegraph · CVSS 8.8 · 74% likely

   CWE-94

2. Sourcegraph vulnerable to Comand Injection via gitserverCVE-2022-41942sourcegraph · CVSS 7.9 · 2.8% likely

   CWE-78

3. Incorrect default permissions found in SourcegraphCVE-2022-41943sourcegraph · CVSS 9 · 1.8% likely

   CWE-276

4. Remote Code Execution in sourcegraphCVE-2022-29171sourcegraph · CVSS 6.6 · 1.4% likely

   CWE-74

5. Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the /…CVE-2020-12283Sourcegraph · 1.3% likely

   CWE-601

6. Side-channel attack in SourcegraphCVE-2021-43823sourcegraph · CVSS 6.5 · 0.9% likely

   CWE-200

7. Side-channel attack in Sourcegraph Code MonitorsCVE-2022-23643sourcegraph · CVSS 6.5 · 0.8% likely

   CWE-203

8. Low risk information disclosure in SourcegraphCVE-2021-32787sourcegraph · CVSS 3.1 · 0.6% likely

   CWE-200

9. Unauthorized overwriting of saved searches in SourcegraphCVE-2022-31155sourcegraph · CVSS 4.3 · 0.5% likely

   CWE-863

10. Indirect Object Access in Sourcegraph Code MonitoringCVE-2022-31154sourcegraph · CVSS 6.4 · 0.5% likely

    CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.