Channel Accessible by Non-Endpoint

Every one of the 54 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier…CVE-2009-3555Apache · CVSS 9.8 · 87% likely

   Apache1 bounty report

2. It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker…CVE-2017-12150Samba · CVSS 7.4 · 13% likely

   Samba

3. A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the require…CVE-2017-12151Samba · CVSS 7.4 · 4.1% likely

   Samba

4. curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HT…CVE-2021-22890Haxx · CVSS 4.3 · 3.1% likely

   Haxx1 bounty report

5. When an authenticated password change request takes place, this vulnerability could allow the attacker to intercept the message that includes the legitimate, new password hash and…CVE-2021-32926Rockwellautomation · CVSS 5.9 · 3.0% likely

   Rockwell Automation

6. rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.CVE-2017-7480Red Hat, Inc. · 2.4% likely

   Red Hat

7. A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle…CVE-2020-10749Red Hat · CVSS 6 · 2.1% likely

   Red Hat

8. It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.CVE-2017-15086Red Hat, Inc. · 1.7% likely

   Red Hat

9. It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.CVE-2017-15085Red Hat, Inc. · 1.7% likely

   Red Hat

10. A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker t…CVE-2017-12697Gm · 1.4% likely

    Gm

11. SMTP MITM refers to a malicious actor setting up an SMTP proxy server between the UniFi Controller version <= 5.10.21 and their actual SMTP server to record their SMTP credentials…CVE-2019-5456UniFi · 1.3% likely

    1 bounty report

12. A vulnerability found in EdgeMAX EdgeRouter V2.0.9 and earlier could allow a malicious actor to execute a man-in-the-middle (MitM) attack during a firmware update. This vulnerabil…CVE-2021-22909Ui · 1.3% likely

    Ui

13. Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is…CVE-2018-14636The Openstack Project · CVSS 5.3 · 1.2% likely

    Openstack

14. MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username a…CVE-2019-3981MikroTik · 1.1% likely

    Mikrotik

15. A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other…CVE-2017-12735Siemens · 1.1% likely

    Siemens

16. In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HT…CVE-2021-41033The Eclipse Foundation · 1.1% likely

    Eclipse Foundation

17. Invitations Service supports HTTP connectionsCVE-2019-3793Pivotal · CVSS 8.1 · 1.1% likely

    Pivotal

18. An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle at…CVE-2021-21953Anker · CVSS 7.7 · 1.0% likely

    Anker

19. IBM Security Access Manager Container gain accessCVE-2023-31004IBM · CVSS 8.3 · 1.0% likely

    IBM

20. engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerabilit…CVE-2016-10536HackerOne · 1.0% likely

    HackerOne

21. A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated…CVE-2017-9941Siemens · 0.9% likely

    Siemens

22. A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to…CVE-2017-6870Siemens · 0.9% likely

    Siemens

23. Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unsp…CVE-2018-13298Synology · CVSS 4.2 · 0.9% likely

    Synology

24. Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yesCVE-2023-7008Red Hat · CVSS 5.9 · 0.8% likely

    Red Hat

25. A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is u…CVE-2019-14899Red Hat · CVSS 7.4 · 0.8% likely

    Red Hat

26. Man-in-the-middle attack in Moonlight iOS/tvOSCVE-2020-11024moonlight-stream · CVSS 6.1 · 0.8% likely

    Moonlight-Stream

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.