Insufficient Type Distinction

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may in…CVE-2023-38831RARLAB · CVSS 7.8 · 100% likelycovered by CyberSIXT

   Rarlab

2. Bluetooth devices supporting LE and specific BR/EDR implementations are vulnerable to method confusion attacksCVE-2020-10134Bluetooth · CVSS 6.3 · 0.7% likely

   Bluetooth

3. When importing resources using Web Workers, error messages would distinguish the difference between `application/javascript` responses and non-script responses. This could have be…CVE-2024-4769Mozilla · CVSS 5.9 · 0.4% likely

   Mozilla

4. Growatt Cloud portal Insufficient Type DistinctionCVE-2025-30510Growatt · CVSS 9.8 · 0.3% likely

   Growatt

5. TYPO3 CMS - Unrestricted File Upload in Form FrameworkCVE-2026-15305TYPO3 · CVSS 6.3 · 0.3% likely

   Typo3

6. Contao is vulnerable to remote code execution in template closuresCVE-2025-65960contao · CVSS 6.6 · 0.2% likely

   Contao

7. DNN does not check the contents of a file when uploading filesCVE-2025-32035dnnsoftware · CVSS 2.6 · 0.2% likely

   Dnnsoftware

8. TYPO3 CMS Vulnerable to Unrestricted File Upload in File Abstraction LayerCVE-2025-47939TYPO3 · CVSS 5.4 · 0.2% likely

   Typo3

9. skops' MethodNode can access unexpected object fields through dot notation, leading to arbitrary code execution at load timeCVE-2025-54413skops-dev · CVSS 8.7 · 0.2% likely
10. IBM Cognos Controller file uploadCVE-2024-45676IBM · CVSS 4.3 · 0.2% likely

    IBM

11. skops' Inconsistent Trusted Type Validation Enables Hidden `operator` Methods ExecutionCVE-2025-54412skops-dev · CVSS 8.7 · 0.2% likely
12. Advantech WebAccess Insufficient Type DistinctionCVE-2023-2866Advantech · CVSS 7.3 · 0.1% likely

    Advantech

13. OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord ExtensionCVE-2026-41341OpenClaw · CVSS 5.4 · 0.1% likely

    OpenClaw

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.