Improperly Implemented Security Check for Standard

Every one of the 128 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium secu…CVE-2024-7965Google · CVSS 8.8 · 19% likely

   Google

2. In Flexense Disk Pulse Enterprise v10.1.18, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to cont…CVE-2017-15663Flexense · 13% likely

   Flexense

3. udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an unsafe second checksum calculation during execution of a re…CVE-2016-10229Linux · 13% likely

   Linux

4. Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium sec…CVE-2024-2174Google · CVSS 8.8 · 13% likely

   Google

5. In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control…CVE-2017-15665Flexense · 9.1% likely

   Flexense

6. In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to con…CVE-2017-15664Flexense · 9.1% likely

   Flexense

7. In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contr…CVE-2017-15662Flexense · 9.1% likely

   Flexense

8. As part of the fix for bug 61201, the documentation for Apache Tomcat 9.0.0.M22 to 9.0.1, 8.5.16 to 8.5.23, 8.0.45 to 8.0.47 and 7.0.79 to 7.0.82 included an updated description o…CVE-2017-15706Apache Software Foundation · 6.1% likely

   Apache

9. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit…CVE-2019-6742Samsung · CVSS 10 · 5.9% likely

   Samsung

10. A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By de…CVE-2020-25686Thekelleys · 5.5% likely

    Thekelleys

11. A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication a…CVE-2018-0268Cisco · 4.9% likely

    Cisco

12. A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port i…CVE-2020-25684Thekelleys · 4.2% likely

    Thekelleys

13. A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence…CVE-2017-15105NLnet Labs · 3.2% likely

    NLnet Labs

14. A vulnerability was found in the implementation of DNSSEC in Dnsmasq up to and including 2.78. Wildcard synthesized NSEC records could be improperly interpreted to prove the non-e…CVE-2017-15107Simon Kelley · 2.6% likely
15. A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC…CVE-2018-16860SAMBA · CVSS 7.5 · 2.5% likely

    Samba

16. A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches th…CVE-2016-8614Red Hat · CVSS 6.3 · 2.5% likely

    Red Hat

17. A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An…CVE-2021-3448Thekelleys · CVSS 4 · 2.3% likely

    Thekelleys

18. Samba from version 4.9.0 and before version 4.9.3 that have AD DC configurations watching for bad passwords (to restrict brute forcing of passwords) in a window of more than 3 min…CVE-2018-16857Samba · CVSS 7.4 · 2.3% likely

    Samba

19. IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations.CVE-2016-3017IBM Corporation · 2.2% likely

    IBM

20. It was found that Diffie Hellman Client key exchange handling in NSS 3.21.x was vulnerable to small subgroup confinement attack. An attacker could use this flaw to recover private…CVE-2016-8635Mozilla · CVSS 5.3 · 2.0% likely

    Mozilla

21. Jenkins before versions 2.44, 2.32.2 is vulnerable to an insufficient permission check for periodic processes (SECURITY-389). The URLs /workspaceCleanup and /fingerprintCleanup di…CVE-2017-2611Jenkins · CVSS 4.3 · 1.9% likely

    Jenkins

22. ITarian - Any user with a valid session token can create and execute agent procedures and bypass mandatory approvalsCVE-2022-25152ITarian · CVSS 9.9 · 1.9% likely
23. iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerabilityCVE-2018-1243Dell EMC · CVSS 7.5 · 1.8% likely

    Dell

24. A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, re…CVE-2017-12303Cisco · 1.6% likely

    Cisco

25. In Jenkins before versions 2.44, 2.32.2 low privilege users were able to override JDK download credentials (SECURITY-392), resulting in future builds possibly failing to download…CVE-2017-2612Jenkins · CVSS 5.4 · 1.5% likely

    Jenkins

26. It was discovered that the ElytronManagedThread in Wildfly's Elytron subsystem in versions from 11 to 16 stores a SecurityIdentity to run the thread as. These threads do not neces…CVE-2019-3894Red Hat · CVSS 5.4 · 1.5% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.