Improper Validation of Consistency within Input

Every one of the 43 is a mark on the map. Named now: 1 to 26, most at risk first.

1. xmldom allows multiple root nodes in a DOMCVE-2022-39353xmldom · CVSS 9.4 · 1.6% likely

   Xmldom Project

2. Invalid RPKI data could disable Route Origin Validation on RTR clients.CVE-2021-41531NLnet Labs · 0.9% likely

   NLnet Labs

3. WAGO: DoS in multiple products in multiple versions using CodesysCVE-2023-1620Wago · CVSS 4.9 · 0.9% likely

   WAGO

4. A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.CVE-2024-25951Dell · CVSS 8 · 0.8% likely

   Dell

5. Windows TCP/IP Security Feature Bypass VulnerabilityCVE-2026-69793Microsoft · CVSS 7.5 · 0.8% likely

   Microsoft

6. WAGO: DoS in multiple versions of multiple productsCVE-2023-1619Wago · CVSS 4.9 · 0.8% likely

   WAGO

7. Improper input validation in parsing and distributing RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privil…CVE-2024-34593Samsung Mobile · CVSS 7.5 · 0.6% likely

   Samsung

8. MongoDB Server secondaries may crash due to forced index constraintsCVE-2024-8305MongoDB Inc · CVSS 6.5 · 0.6% likely

   MongoDB

9. 389-ds-base: malformed userpassword hash may cause denial of serviceCVE-2024-5953Redhat · CVSS 5.7 · 0.6% likely

   Red Hat

10. In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameterCVE-2024-31136JetBrains · CVSS 7.4 · 0.5% likely

    JetBrains

11. Improper Validation of Consistency within Input in GitLabCVE-2024-12093GitLab · CVSS 6.8 · 0.5% likely

    GitLab

12. Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for tr…CVE-2024-34619Samsung Mobile · CVSS 7.5 · 0.5% likely

    Samsung

13. Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with s…CVE-2024-34587Samsung Mobile · CVSS 7.5 · 0.5% likely

    Samsung

14. CVAT: Denial of service with regards to automatic annotationCVE-2026-73219cvat-ai · CVSS 5.3 · 0.5% likely

    Cvat-Ai

15. TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in sslCVE-2026-94200Erlang · CVSS 8.2 · 0.5% likely

    Erlang

16. Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crashCVE-2024-39515Juniper Networks · CVSS 7.5 · 0.5% likely

    Juniper Networks

17. Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertisedCVE-2026-101951Juniper Networks · CVSS 7.5 · 0.4% likely

    Juniper Networks

18. In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing toolsCVE-2024-31140JetBrains · CVSS 4.1 · 0.4% likely

    JetBrains

19. OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwriteCVE-2026-18794CalcProgrammer1 · CVSS 8.2 · 0.4% likely
20. Keycloak-services: keycloak-services: oidc idp update reuses masked client secret after token url changeCVE-2026-15943Red Hat · CVSS 5.5 · 0.4% likely

    Red Hat

21. Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution checkCVE-2026-18209Red Hat · CVSS 3.4 · 0.4% likely

    Red Hat

22. Improper input validation in parsing RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction…CVE-2024-34592Samsung Mobile · CVSS 5.3 · 0.4% likely

    Samsung

23. Improper input validation in parsing an item data from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service…CVE-2024-34591Samsung Mobile · CVSS 5.3 · 0.4% likely

    Samsung

24. Improper input validation혻in parsing an item type from RTCP SDES packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service…CVE-2024-34590Samsung Mobile · CVSS 5.3 · 0.4% likely

    Samsung

25. Improper input validation in parsing RTCP RR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction i…CVE-2024-34589Samsung Mobile · CVSS 5.3 · 0.4% likely

    Samsung

26. Improper input validation혻in parsing RTCP SR packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to trigger temporary denial of service. User interaction i…CVE-2024-34588Samsung Mobile · CVSS 5.3 · 0.4% likely

    Samsung

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.