Improper Validation of Syntactic Correctness of Input

Every one of the 94 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and…CVE-2024-51983Brother Industries, Ltd · CVSS 7.5 · 12% likely

   Brother Industries, Ltd

2. Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh.CVE-2024-51982Brother Industries, Ltd · CVSS 7.5 · 11% likely

   Brother Industries, Ltd

3. The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value o…CVE-2023-27043Python · CVSS 5.3 · 2.5% likely

   Python

4. Command Injection Vulnerability in Video StationCVE-2021-28812QNAP Systems Inc. · CVSS 8.8 · 1.6% likely

   QNAP

5. Out of Memory issue in ProtocolBuffers for cpp and pythonCVE-2022-1941Google LLC · CVSS 7.5 · 1.5% likely

   Google

6. Infinite loop in JSON unmarshaling in google.golang.org/protobufCVE-2024-24786google.golang.org/protobuf · CVSS 7.5 · 1.3% likely
7. Jetty URI parsing of invalid authorityCVE-2024-6763Eclipse Foundation · CVSS 3.7 · 1.0% likely

   Eclipse Foundation

8. A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and…CVE-2021-31988Axis Communications AB · 1.0% likely

   Axis Communications AB

9. Microsoft Exchange Server Spoofing VulnerabilityCVE-2025-25007Microsoft · CVSS 5.3 · 0.9% likely

   Microsoft

10. A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients.CVE-2021-31987Axis Communications AB · 0.9% likely

    Axis Communications AB

11. PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM PacketsCVE-2024-3384Palo Alto Networks · CVSS 7.5 · 0.9% likely

    Palo Alto Networks

12. Keycloak: keycloak: denial of service via specially crafted saml inputCVE-2026-7307Red Hat · CVSS 7.5 · 0.9% likely

    Red Hat

13. Unexpected memory consumption during token parsing in golang.org/x/oauth2CVE-2025-22868golang.org/x/oauth2 · CVSS 7.5 · 0.9% likely
14. Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the deviceCVE-2022-22192Juniper Networks · CVSS 7.5 · 0.8% likely

    Juniper Networks

15. Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679Go standard library · CVSS 7.5 · 0.8% likely

    Go standard library

16. Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.CVE-2021-44695Siemens · CVSS 4.9 · 0.8% likely

    Siemens

17. DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0CVE-2023-32649Nozomi Networks · CVSS 7.5 · 0.6% likely

    Nozomi Networks

18. Erik de Jong, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injecti…CVE-2024-8160Axis Communications AB · CVSS 3.8 · 0.6% likely

    Axis Communications AB

19. SRX Series and MX Series: An FPC core is observed when IDP is enabled on the device and a specific malformed SSL packet is receivedCVE-2023-28985Juniper Networks · CVSS 7.5 · 0.6% likely

    Juniper Networks

20. xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing contentCVE-2026-83611xmldom · CVSS 6.9 · 0.6% likely

    Xmldom Project

21. Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditCVE-2026-105660mtrudel · CVSS 6.9 · 0.6% likely

    Mtrudel

22. DoS via SAML configuration in Guardian/CMC before 22.6.2CVE-2023-23903Nozomi Networks · CVSS 4.9 · 0.6% likely

    Nozomi Networks

23. Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflictCVE-2025-13033nodemailer · CVSS 7.5 · 0.6% likely

    Nodemailer

24. Improper input validation in the user management function of web interface in Aten PE6208 2.3.228 and 2.4.232 allows remote authenticated users to cause a partial DoS of web inter…CVE-2023-43850Aten · CVSS 6.5 · 0.6% likely

    Aten

25. Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crashCVE-2024-21598Juniper Networks · CVSS 7.5 · 0.6% likely

    Juniper Networks

26. Sauter: Improper Validation of user-controlled dataCVE-2025-41719Sauter · CVSS 8.8 · 0.6% likely

    Sauter

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.