Interpretation Conflict

Every one of the 157 is a mark on the map. Named now: 1 to 26, most at risk first.

1. WordPress Core 6.9-7.0.1 - Pre-Auth Batch-Route ConfusionCVE-2026-63030WordPress · CVSS 9.8 · 11% likely

   4 articles1 article this week: SOCRadar profiles CyberXero’s AI-assisted attacks on Ukraine

2. Git allows arbitrary code execution through broken config quotingCVE-2025-48384git · CVSS 8.1 · 4.5% likely
3. Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-28474Microsoft · CVSS 8.8 · 51% likely
4. Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as tr…CVE-2019-175964.7% likely
5. bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x before 3.0.4, 4.x before 4.0.1, 5.x before 5.0.2, and 6.x before 6.0.2 (not affecting Cumulus Linux or VyOS), when ENABL…CVE-2019-58922.7% likely
6. cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is…CVE-2022-237732.7% likely
7. An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injec…CVE-2019-187922.5% likely
8. URI validation failure on SVG parsing. Bypass of CVE-2023-23924CVE-2023-24813dompdf · CVSS 10 · 2.5% likely
9. Gitea before 1.11.2 is affected by Trusting HTTP Permission Methods on the Server Side when referencing the vulnerable admin or user API. which could let a remote malisious user e…CVE-2021-453272.1% likely
10. The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives. Note: It has been argued that "The vulnerabi…CVE-2019-19589CVSS 9.8 · 1.8% likely
11. The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Secu…CVE-2020-101801.7% likely
12. The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on…CVE-2020-93421.6% likely
13. Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP requestCVE-2023-22602Apache Software Foundation · 1.6% likely
14. Softing Secure Integration Server Interpretation Conflict Remote Code Execution VulnerabilityCVE-2023-39481Softing · CVSS 6.6 · 1.6% likely
15. The Quick Heal AV parsing engine (November 2019) allows virus-detection bypass via a crafted GPFLAG in a ZIP archive. This affects Total Security, Home Security, Total Security Mu…CVE-2020-93621.5% likely
16. ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Pr…CVE-2020-101931.4% likely
17. Consensus flaw during block processing in go-ethereumCVE-2021-39137ethereum · CVSS 6.5 · 1.3% likely
18. In ModSecurity before 2.9.6 and 3.x before 3.0.8, HTTP multipart requests were incorrectly parsed and could bypass the Web Application Firewall. NOTE: this is related to CVE-2022-…CVE-2022-48279CVSS 7.5 · 1.2% likely
19. Improper header name validation in guzzlehttp/psr7CVE-2023-29197guzzle · CVSS 5.3 · 1.2% likely
20. ESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects versions before 1294 of Smart Secu…CVE-2020-92641.2% likely
21. The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and…CVE-2020-93991.2% likely
22. Broken Authorization in ZITADEL ActionsCVE-2022-36051zitadel · CVSS 8.7 · 1.0% likely
23. The Sophos AV parsing engine before 2020-01-14 allows virus-detection bypass via a crafted ZIP archive. This affects Endpoint Protection, Cloud Optix, Mobile, Intercept X Endpoint…CVE-2020-93631.0% likely
24. OpenClaw < 2026.2.24 - Hidden Command Execution via Shell-Wrapper Positional argv CarriersCVE-2026-32052OpenClaw · CVSS 6.4 · 1.0% likely
25. Fastify's Content-Type header tab character allows body validation bypassCVE-2026-25223fastify · CVSS 7.5 · 0.9% likely
26. Amavis before 2.12.3 and 2.13.x before 2.13.1, in part because of its use of MIME-tools, has an Interpretation Conflict (relative to some mail user agents) when there are multiple…CVE-2024-28054CVSS 7.4 · 0.8% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.