Always-Incorrect Control Flow Implementation

Every one of the 148 is a mark on the map. Named now: 1 to 26, most at risk first.

1. rConfig <3.9.4 - Sensitive Information DisclosureCVE-2020-942518% likely
2. Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, use…CVE-2019-99463.2% likely
3. The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a callee chooses to answer a call, which…CVE-2019-171922.7% likely
4. Incorrect handling of invalid surrogate pair characters in ujsonCVE-2022-31116ultrajson · CVSS 7.5 · 2.5% likely

   Ultrajson

5. A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially r…CVE-2020-1914Facebook · 2.5% likely

   Meta (Facebook)

6. Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c.CVE-2020-362772.4% likely
7. In the Lustre file system before 2.12.3, the mdt module has an LBUG panic (via a large MDT Body eadatasize field) due to the lack of validation for specific fields of packets sent…CVE-2019-204302.2% likely
8. Multiple Cisco Products Snort Application Detection Engine Policy Bypass VulnerabilityCVE-2021-1236Cisco · CVSS 4 · 2.2% likely

   Cisco

9. An issue was discovered in Artifex MuJS 1.0.5. jscompile.c can cause a denial of service (invalid stack-frame jump) because it lacks an ENDTRY opcode call.CVE-2019-114122.1% likely
10. An issue was discovered in Poppler 0.71.0. There is a reachable abort in Object.h, will lead to denial of service because EmbFile::save2 in FileSpec.cc lacks a stream check before…CVE-2018-190581.9% likely
11. MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Sp…CVE-2020-354771.7% likely
12. A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.…CVE-2020-3885Apple · 1.6% likely

    Apple

13. Turcom TRCwifiZone through 2020-08-10 allows authentication bypass by visiting manage/control.php and ignoring 302 Redirect responses.CVE-2020-174661.5% likely
14. Discrepency in transfer value and actual value due to incorrect truncation in FrontierCVE-2022-31111paritytech · CVSS 5.3 · 1.4% likely

    Paritytech

15. Drainage of FeeCollector's Block Transaction FeesCVE-2021-43839crypto-org-chain · CVSS 7.5 · 1.4% likely
16. Multiple evaluation of contract address in call in vyperCVE-2022-29255vyperlang · CVSS 8.2 · 1.3% likely

    Vyperlang

17. In version 6.5 Microchip MiWi software and all previous versions including legacy products, the stack is validating only two out of four Message Integrity Check (MIC) bytes.CVE-2021-376051.3% likely
18. In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact beca…CVE-2018-167661.3% likely
19. In version 6.5 of Microchip MiWi software and all previous versions including legacy products, there is a possibility of frame counters being validated/updated prior to the messag…CVE-2021-376041.2% likely
20. A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP header. This issue resu…CVE-2023-1668Cloudbase · CVSS 8.2 · 1.2% likely
21. Ansible prior to 1.5.4 mishandles the evaluation of some strings.CVE-2014-26861.2% likely
22. Incorrect handling of internal redirects results in crash in EnvoyCVE-2022-21655envoyproxy · CVSS 7.5 · 1.1% likely

    Envoyproxy

23. Authorization Policy bypass in IstioCVE-2022-21679istio · CVSS 6.8 · 1.1% likely

    Istio

24. Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim's Signal phone and disclose currently used DNS server due to I…CVE-2020-5753Signal Private Messenger · 1.1% likely
25. An issue was discovered in the BSON ObjectID (aka bson-objectid) package 1.3.0 for Node.js. ObjectID() allows an attacker to generate a malformed objectid by inserting an addition…CVE-2019-197291.1% likely
26. Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control. The data replication mechanism allows policies to a…CVE-2021-439791.1% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.