Insecure Default Variable Initialization

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. Skype for Consumer Remote Code Execution VulnerabilityCVE-2024-21411Microsoft · CVSS 8.8 · 2.6% likely

   Microsoft

2. GE UR family insecure default variable initializationCVE-2021-27426GE · CVSS 9.8 · 1.2% likely

   Ge

3. Windows Remote Desktop Services Remote Code Execution VulnerabilityCVE-2024-49120Microsoft · CVSS 8.1 · 1.1% likely

   Microsoft

4. An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject…CVE-2022-47197Ghost Foundation · CVSS 9 · 1.0% likely

   Ghost

5. An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject…CVE-2022-47194Ghost Foundation · CVSS 9 · 0.8% likely

   Ghost

6. A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an…CVE-2022-3262Redhat · CVSS 8.1 · 0.8% likely

   Red Hat

7. An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject…CVE-2022-47196Ghost Foundation · CVSS 9 · 0.7% likely

   Ghost

8. An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject…CVE-2022-47195Ghost Foundation · CVSS 9 · 0.7% likely

   Ghost

9. Donetick Has Weak Default JWT SecretCVE-2025-47945donetick · CVSS 9.1 · 0.7% likely
10. Microsoft QUIC Security Feature Bypass VulnerabilityCVE-2026-103577Microsoft · CVSS 7.5 · 0.6% likely

    Microsoft

11. An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to un…CVE-2023-27516SoftEther VPN · CVSS 7.3 · 0.5% likely

    SoftEther VPN

12. Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook SecretCVE-2025-61926ossf · CVSS 4.6 · 0.5% likely
13. In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources…CVE-2022-46831JetBrains · CVSS 6.6 · 0.5% likely

    JetBrains

14. NFS server misconfiguration allows file access outside the exported directoryCVE-2024-39916FOGProject · CVSS 6.4 · 0.3% likely

    FOGProject

15. filestash v0.4 is configured to skip TLS certificate verification when using the FTPS protocol, possibly allowing attackers to execute a man-in-the-middle attack via the Init func…CVE-2024-41255Filestash · CVSS 7.5 · 0.3% likely
16. vm2 before 3.11.7 Sandbox Escape via CLI requireCVE-2026-92950patriksimek · CVSS 8.6 · 0.2% likely

    Patriksimek

17. In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could lead to local escala…CVE-2026-0082Google · CVSS 10 · 0.2% likely

    Google

18. OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec PolicyCVE-2026-41330OpenClaw · CVSS 4.4 · 0.1% likely

    OpenClaw

19. In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value. This could lead to loca…CVE-2026-95404Google · CVSS 6.7 · 0.1% likely

    Google

20. In multiple functions of mpu.c, there is a possible way to execute code from non-secure memory in the security coprocessor due to an insecure default value. This could lead to loc…CVE-2026-59596Google · CVSS 8.4 · 0.1% likely

    Google

21. In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an insecure default value. Th…CVE-2026-57013Google · CVSS 6.7 · 0.1% likely

    Google

22. In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local escalation of privilege with…CVE-2025-48563Google · CVSS 7.8 · 0.1% likely

    Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.