Improper Handling of Syntactically Invalid Structure

Every one of the 23 is a mark on the map. Named now: 1 to 23, most at risk first.

1. The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function. The par…CVE-2018-5381Quagga · CVSS 6.5 · 30% likely

   Quagga

2. Eclipse CycloneDDS Improper Handling of Syntactically Invalid StructureCVE-2021-38443Eclipse · CVSS 6.6 · 2.1% likely

   Eclipse Foundation

3. A vulnerability exists in the SAML connector of the github.com/dexidp/dex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentica…CVE-2020-27847dexidp/dex · 1.7% likely
4. VideoEdgeCVE-2021-36199Johnson Controls · CVSS 5.3 · 1.1% likely

   Johnson Controls

5. DoS in Sparx Pro Cloud ServerCVE-2026-42100Sparx Systems · CVSS 7.1 · 0.7% likely

   Sparx Systems

6. ParsePKCS1PrivateKey panic with partial keys in crypto/x509CVE-2025-22865Go standard library · CVSS 7.5 · 0.6% likely

   Go standard library

7. An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs it's parser cannot interpret. Unparsed port…CVE-2026-87986mistralai · CVSS 10 · 0.6% likely

   Mistralai

8. Junos OS Evolved: Specific TCP traffic causes OFP core and restart of RECVE-2024-21612Juniper Networks · CVSS 7.5 · 0.5% likely

   Juniper Networks

9. An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacke…CVE-2024-55594Fortinet · CVSS 5.5 · 0.5% likely

   Fortinet

10. Firebird: DoS via `op_response` packet from clientCVE-2026-34232FirebirdSQL · CVSS 7.5 · 0.5% likely

    FirebirdSQL

11. msgpack5: Reserved byte can cause unbounded stream bufferingCVE-2026-107299mcollina · CVSS 5.9 · 0.4% likely

    Mcollina

12. An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker…CVE-2023-42784Fortinet · CVSS 5.5 · 0.4% likely

    Fortinet

13. Ericsson Packet Core Controller (PCC) - Improper Handling of Syntactically Invalid Structure VulnerabilityCVE-2024-53828Ericsson · CVSS 5.3 · 0.4% likely

    Ericsson

14. Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects c…CVE-2025-0343Swift Project · CVSS 7.5 · 0.3% likely

    Swift Project

15. A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to…CVE-2026-20125Cisco · CVSS 7.7 · 0.3% likely

    Cisco

16. Adversarial unsanitized input may cause MongoDB Rust Driver to issue unintended commands.CVE-2024-6382MongoDB Inc · CVSS 6.4 · 0.3% likely

    MongoDB

17. Improper Handling of Syntactically Invalid Structure in MZ Automation libIEC61850CVE-2026-50103MZ Automation · CVSS 6.5 · 0.3% likely

    MZ Automation

18. dialect/mod.rs in the libsql-sqlite3-parser crate through 0.13.0 before 14f422a for Rust can crash if the input is not valid UTF-8.CVE-2025-47736gwenn · CVSS 2.9 · 0.3% likely
19. Incorrect access control in Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to access the G code's shared folder and view sensitive information.CVE-2024-22809Tormach · CVSS 6.5 · 0.3% likely
20. An issue in the communication protocol of Tormach xsTECH CNC Router, PathPilot Controller v2.9.6 allows attackers to cause a Denial of Service (DoS) via crafted commands.CVE-2024-22815Tormach · CVSS 5.3 · 0.2% likely
21. IBM Terracotta denial of serviceCVE-2025-2529IBM · CVSS 2.9 · 0.2% likely

    IBM

22. Ericsson Packet Core Gateway (PCG) - Improper Handling of Syntactically Invalid Structure VulnerabilityCVE-2026-25657Ericsson · CVSS 7.1 · 0.2% likely

    Ericsson

23. Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause service degra…CVE-2025-59174Ericsson · CVSS 6.5 · 0.2% likely

    Ericsson

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.