Exposure of Resource to Wrong Sphere

Every one of the 500 is a mark on the map. Named now: 1 to 26, most at risk first.

1. EyouCms v1.6.3 - Information DisclosureCVE-2023-3764525% likely
2. WAVLINK WN530HG4 - Improper Access ControlCVE-2022-3404722% likely
3. DedeCMS 5.7 - Path DisclosureCVE-2018-691019% likely
4. WAVLINK WN535 G3 - Information DisclosureCVE-2022-318458.7% likely
5. WAVLINK WN535 G3 - Information DisclosureCVE-2022-318467.4% likely
6. Akkadian Provisioning Manager 4.50.02 - Sensitive Information DisclosureCVE-2020-273616.8% likely
7. Issabel PBX 4.0.0-6 - Directory ListingCVE-2023-375993.6% likely
8. Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability in Device Guard that could allow the attacker to inject mali…CVE-2017-0215Microsoft Corporation · 40% likely

   Microsoft

9. xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.CVE-2022-25236CVSS 9.8 · 35% likely
10. A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium whi…CVE-2018-7846Modicon M580 Modicon M340 Modicon Quantum Modicon Premium · 30% likely
11. Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access content from a different (1) domain or (2) z…CVE-2011-196018% likely
12. Trunk's 'Claim your pod' could be used to obtain un-used podsCVE-2024-38368CocoaPods · CVSS 9.3 · 15% likely
13. Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different (1) dom…CVE-2011-125815% likely
14. While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8.0.41, and 7.0.0 to 7…CVE-2017-5648Apache Software Foundation · 13% likely

    Apache

15. Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability…CVE-2021-4635413% likely
16. An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by…CVE-2020-84498.3% likely
17. Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' funct…CVE-2020-191557.5% likely
18. Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffic Server (ATS) versi…CVE-2018-8040Apache Software Foundation · 7.2% likely

    Apache

19. Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityCVE-2021-43893Microsoft · CVSS 7.5 · 6.7% likely

    Microsoft

20. LibreOffice and OpenOffice automatically open embedded contentCVE-2012-5639LibreOffice; OpenOffice · 5.8% likely
21. An issue was discovered in Joomla! before 3.9.16. Various actions in com_templates lack the required ACL checks, leading to various potential attack vectors.CVE-2020-102384.9% likely
22. In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, b…CVE-2019-91864.5% likely
23. Apache HTTP Server: source code disclosure with handlers configured via AddTypeCVE-2024-40725Apache Software Foundation · CVSS 5.3 · 4.4% likely

    Apache

24. Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remote_agent.php req…CVE-2017-166604.2% likely
25. In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process throug…CVE-2020-158164.1% likely
26. Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN duri…CVE-2012-18464.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.