Improper Handling of Unexpected Data Type

Every one of the 32 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NodeBB Pre-Authentication Denial-of-ServiceCVE-2023-30591NodeBB, Inc. · CVSS 7.5 · 59% likely

   NodeBB

2. Improper Handling of Unexpected Data Type in NokogiriCVE-2022-29181sparklemotion · CVSS 8.2 · 3.2% likely

   Sparklemotion

3. Improper Handling of Unexpected Data Type in cedCVE-2021-39131sonicdoe · CVSS 7.5 · 1.9% likely
4. Multiple Cisco Products Snort Rule Denial of Service VulnerabilityCVE-2021-40116Cisco · CVSS 8.6 · 1.4% likely

   Cisco

5. A program using swift-nio-http2 is vulnerable to a denial of service attack caused by a network peer sending ALTSVC or ORIGIN frames. This attack affects all swift-nio-http2 versi…CVE-2022-24668Swift Project · 1.1% likely

   Swift Project

6. Passing in a non-string 'html' argument can lead to unsanitized outputCVE-2021-32696ericnorris · CVSS 3.7 · 1.1% likely
7. Files Drop public link can be added as federated shareCVE-2021-32655nextcloud · CVSS 3.5 · 1.0% likely

   Nextcloud

8. Cisco Firepower Threat Defense Software Security Intelligence DNS Feed Bypass VulnerabilityCVE-2022-20730Cisco · CVSS 4 · 1.0% likely

   Cisco

9. Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability. A remote unauthenticated attacker could potentially explo…CVE-2024-25966Dell · CVSS 5.3 · 0.9% likely

   Dell

10. Fatal error on incorrect base64 data in RRDPCVE-2022-3029NLnet Labs · 0.9% likely

    NLnet Labs

11. Libnbd: crash or misbehaviour when nbd server returns an unexpected block sizeCVE-2023-5215Red Hat · CVSS 5.3 · 0.8% likely

    Red Hat

12. Kong API Gateway Enterprise: JWT Algorithm-ConfusionCVE-2026-14916Kong · CVSS 7.7 · 0.7% likely

    Kong Inc.

13. Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environmentCVE-2022-22219Juniper Networks · CVSS 5.9 · 0.7% likely

    Juniper Networks

14. A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch…CVE-2022-1642Swift Project · 0.7% likely

    Swift Project

15. Certain HP LaserJet Printers – Potential Denial of ServiceCVE-2024-9423HP Inc. · CVSS 5.3 · 0.6% likely

    HP

16. HPE IceWall Federation Agent and Proxy, Denial of Service vulnerabilityCVE-2026-73785Hewlett Packard Enterprise · CVSS 7.5 · 0.6% likely

    Hewlett Packard Enterprise

17. Tiptap for PHP < 2.1.1 DoS via Malformed href AttributeCVE-2026-47110ueberdosis · CVSS 6.5 · 0.5% likely
18. HP LaserJet MFP M232-M237 Printer Series - Potential Denial of ServiceCVE-2025-2268HP Inc. · CVSS 6.9 · 0.5% likely

    HP

19. Insufficient argument checking in Secure state Entry functions in software using Cortex-M Security Extensions (CMSE), that has been compiled using toolchains that implement 'Arm v…CVE-2024-0151Arm · CVSS 6.5 · 0.4% likely

    Arm Ltd

20. Certain HP LaserJet Pro Printers – Potential Denial of ServiceCVE-2025-1004HP Inc. · CVSS 6.9 · 0.4% likely

    HP

21. Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is usedCVE-2023-28961Juniper Networks · CVSS 5.8 · 0.4% likely

    Juniper Networks

22. A single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI gateway unresponsive, such that connected lighting cannot be controlled with the IKEA Home Smart app and TRÅDFRI…CVE-2022-39065Ikea · CVSS 6.5 · 0.4% likely
23. An attacker sending a single malformed IEEE 802.15.4 (Zigbee) frame makes the TRÅDFRI bulb blink, and if they replay (i.e. resend) the same frame multiple times, the bulb performs…CVE-2022-39064Ikea · CVSS 8.1 · 0.4% likely
24. Junos OS: EX4300: Stateless firewall policer fails to discard trafficCVE-2021-0243Juniper Networks · CVSS 4.7 · 0.4% likely

    Juniper Networks

25. Nextcloud Calendar attachments of local files are offered to downloadedCVE-2025-66550nextcloud · CVSS 5.7 · 0.4% likely

    Nextcloud

26. Nextcloud Calendar's event create can create attachments that link to other websitesCVE-2024-37316nextcloud · CVSS 4.6 · 0.4% likely

    Nextcloud

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.