Incomplete Cleanup

Every one of the 243 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the ch…CVE-2017-1709082% likely
2. Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frameCVE-2025-31650Apache Software Foundation · CVSS 7.5 · 61% likely

   Apache

3. A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX,…CVE-2022-1552Postgresql · 17% likely

   Postgresql

4. The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the serv…CVE-2018-18924Projeqtor · 9.5% likely

   ProjeQtor

5. Apache Struts: excessive disk usageCVE-2023-41835Apache Software Foundation · CVSS 7.5 · 7.3% likely

   Apache

6. Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2022-21123Intel · CVSS 5.5 · 6.9% likely

   Intel

7. Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via loca…CVE-2022-21166Intel · CVSS 5.5 · 6.5% likely

   Intel

8. Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2022-21125Intel · CVSS 5.5 · 6.5% likely

   Intel

9. Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local…CVE-2022-21127Intel · CVSS 5.5 · 5.5% likely

   Intel

10. Resource leakage when decoding certificates and keysCVE-2022-1473OpenSSL · CVSS 7.5 · 4.7% likely

    OpenSSL

11. An incomplete-cleanup vulnerability in the Office rendering engine of Gotenberg through 6.2.1 allows an attacker to overwrite LibreOffice configuration files and execute arbitrary…CVE-2020-13451Thecodingmachine · 3.2% likely

    Thecodingmachine

12. In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules…CVE-2019-25016Opendoas Project · 2.8% likely
13. In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumsta…CVE-2017-0303F5 Networks, Inc. · 2.7% likely

    F5

14. Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requestsCVE-2023-42795Apache Software Foundation · CVSS 5.3 · 2.5% likely

    Apache

15. Apache Tomcat: WebSocket DoS with incomplete closing handshakeCVE-2024-23672Apache Software Foundation · CVSS 6.3 · 2.3% likely

    Apache

16. Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on WindowsCVE-2023-42794Apache Software Foundation · 2.3% likely

    Apache

17. A privilege escalation vulnerability in the Trend Micro Deep Security as a Service Quick Setup cloud formation template could allow an authenticated entity with certain unrestrict…CVE-2019-18191Trend Micro · 2.2% likely

    Trend Micro

18. East-Tec Eraser 2002 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that wa…CVE-2002-20672.2% likely
19. SecureClean 3 build 2.0 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that…CVE-2002-20702.2% likely
20. Eraser 5.3 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was supposed…CVE-2002-20682.2% likely
21. BEA WebLogic Server and WebLogic Express 7.0 through Service Pack 5 does not log out users when an application is redeployed, which allows those users to continue to access the ap…CVE-2005-17442.1% likely
22. BestCrypt BCWipe 1.0.7 and 2.0 through 2.35.1 does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sens…CVE-2002-20662.1% likely
23. PGP 6.x and 7.x does not clear Windows alternate data streams that are attached to files on NTFS file systems, which allows attackers to recover sensitive information that was sup…CVE-2002-20692.1% likely
24. Upgrading doesn't prevent exploiting vulnerable XWiki documentsCVE-2023-36468xwiki · CVSS 10 · 1.9% likely

    Xwiki

25. Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive informat…CVE-2005-22931.8% likely
26. "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Catalina 10.15. A user may be unable…CVE-2019-8768Apple · 1.6% likely

    Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.