Improper Validation of Specified Type of Input

Every one of the 162 is a mark on the map. Named now: 1 to 26, most at risk first.

1. ServiceNow UI Macros - Template InjectionCVE-2024-4879ServiceNow · CVSS 9.8 · 100% likely

   ServiceNow

2. remote code executionCVE-2024-6298ABB · CVSS 10 · 19% likely

   ABB

3. Data Validation / SanitizationCVE-2024-51550ABB · CVSS 10 · 1.8% likely

   ABB

4. A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP version(s) 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the…CVE-2021-32024BlackBerry · CVSS 9.8 · 1.8% likely

   BlackBerry

5. Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2025-59259Microsoft · CVSS 6.5 · 1.5% likely

   Microsoft

6. Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2025-59257Microsoft · CVSS 6.5 · 1.5% likely

   Microsoft

7. Credentails DisclosureCVE-2024-51546ABB · CVSS 7.5 · 1.5% likely

   ABB

8. Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service VulnerabilityCVE-2022-20783Cisco · CVSS 7.5 · 1.4% likely

   Cisco

9. PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Postgresql · CVSS 8.8 · 1.3% likely

   Postgresql

10. SQL Server Elevation of Privilege VulnerabilityCVE-2026-26115Microsoft · CVSS 8.8 · 1.3% likely

    Microsoft

11. .NET Framework Denial of Service VulnerabilityCVE-2026-50524Microsoft · CVSS 7.5 · 1.2% likely

    Microsoft

12. Improper Validation of Specified Type of Input in GitLabCVE-2023-4522GitLab · CVSS 4.3 · 1.2% likely

    GitLab

13. Windows Local Session Manager (LSM) Denial of Service VulnerabilityCVE-2025-58729Microsoft · CVSS 6.5 · 1.1% likely

    Microsoft

14. A vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0), SICAM PAS/PQS (All versions >= 7.0 < V8.06). Affected software does not properly validate the input for…CVE-2022-43723Siemens · CVSS 7.5 · 1.0% likely

    Siemens

15. Specific cstrings input may not be properly validated in the Go DriverCVE-2021-20329MongoDB Inc. · CVSS 6.8 · 0.9% likely

    MongoDB

16. Improper Validation of Specified Type of Input in GitLabCVE-2023-3917GitLab · CVSS 4.3 · 0.9% likely

    GitLab

17. Improper Validation of Specified Type of Input in GitLabCVE-2023-3900GitLab · CVSS 4.3 · 0.9% likely

    GitLab

18. M365 Copilot Information Disclosure VulnerabilityCVE-2026-24307Microsoft · CVSS 9.3 · 0.9% likely

    Microsoft

19. Microsoft Office SharePoint Elevation of Privilege VulnerabilityCVE-2026-96044Microsoft · CVSS 8.8 · 0.8% likely

    Microsoft

20. In FRRouting (FRR) through 9.1, an attacker using a malformed Prefix SID attribute in a BGP UPDATE packet can cause the bgpd daemon to crash.CVE-2024-31948Frrouting · CVSS 6.5 · 0.8% likely

    FRRouting

21. OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.CVE-2024-5594OpenVPN · CVSS 9.1 · 0.8% likely

    OpenVPN

22. Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statementsCVE-2025-46342kyverno · CVSS 8.6 · 0.8% likely

    Kyverno

23. Improper Validation of Specified Type of Input in GitLabCVE-2023-3904GitLab · CVSS 4.3 · 0.8% likely

    GitLab

24. Denial-of-Service VulnerabilityCVE-2024-9404Moxa · CVSS 5.3 · 0.7% likely

    Moxa

25. Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packetCVE-2022-22228Juniper Networks · CVSS 7.5 · 0.7% likely

    Juniper Networks

26. Fastify vulnerable to invalid content-type parsing, which could lead to validation bypassCVE-2025-32442fastify · CVSS 7.5 · 0.7% likely

    Fastify

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.