Violation of Secure Design Principles

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flawCVE-2023-29320Adobe · CVSS 7.8 · 6.0% likely

   Adobe

2. Adobe Acrobat Reader DC CSP Bypass Leads To Privilege EscalationCVE-2022-28244Adobe · CVSS 6.3 · 3.7% likely

   Adobe

3. Adobe Acrobat Reader Missing Custom Protocols in Warning Message PromptsCVE-2021-44714Adobe · CVSS 2.5 · 2.5% likely

   Adobe

4. Magento Commerce insecure storage of sensitive documentationCVE-2021-28583Adobe · CVSS 7.5 · 1.9% likely

   Adobe

5. A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it su…CVE-2017-6032Schneider Electric Modicon Modbus Protocol · 1.7% likely
6. Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsCVE-2021-36061Adobe · CVSS 5.4 · 1.6% likely

   Adobe

7. Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or register…CVE-2019-15611Nextcloud iOS · 1.1% likely
8. Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)CVE-2026-48399Adobe · CVSS 7.5 · 0.9% likely

   Adobe

9. AEM Violation of Secure Design Principles Security feature bypassCVE-2022-30683Adobe · CVSS 5.3 · 0.8% likely

   Adobe

10. A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.CVE-2020-8133Nextcloud Server · 0.7% likely
11. PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)CVE-2026-39888MervinPraison · CVSS 10 · 0.5% likely

    MervinPraison

12. OpenCTI Authenticated Privilege EscalationCVE-2024-26139OpenCTI-Platform · CVSS 8.3 · 0.4% likely

    OpenCTI-Platform

13. Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalationCVE-2019-0061Juniper Networks · CVSS 7.8 · 0.4% likely

    Juniper Networks

14. Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-52714Huawei · CVSS 7.5 · 0.3% likely

    Huawei

15. Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-57957Huawei · CVSS 6.6 · 0.3% likely

    Huawei

16. Audition | Violation of Secure Design Principles (CWE-657)CVE-2026-113563Adobe · CVSS 8.6 · 0.3% likely

    Adobe

17. After Effects | Violation of Secure Design Principles (CWE-657)CVE-2026-113526Adobe · CVSS 8.6 · 0.3% likely

    Adobe

18. Audition | Violation of Secure Design Principles (CWE-657)CVE-2026-113551Adobe · CVSS 8.7 · 0.3% likely

    Adobe

19. Acrobat Reader | Violation of Secure Design Principles (CWE-657)CVE-2025-54255Adobe · CVSS 4 · 0.3% likely

    Adobe

20. OpenCTI bypass of protected attribute updateCVE-2025-24887OpenCTI-Platform · CVSS 6.3 · 0.3% likely

    OpenCTI-Platform

21. A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an…CVE-2019-5478Zynq UltraScale+ SoC · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.