Incorrect Calculation

Every one of the 137 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connections) because connection_read_header_more in connections.c…CVE-2022-30780Lighttpd · 57% likely

   Lighttpd

2. NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance th…CVE-2016-74339.8% likely
3. A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library…CVE-2018-8319Microsoft · 7.7% likely

   Microsoft

4. Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-35641Microsoft · CVSS 8.8 · 7.2% likely

   Microsoft

5. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Blu…CVE-2020-0022Google · CVSS 8.8 · 6.1% likely

   Google

6. A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.CVE-2022-30600Moodle · 5.1% likely

   Moodle

7. In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes,…CVE-2021-45960Libexpat Project · CVSS 8.8 · 4.7% likely

   Libexpat Project

8. library/glob.html in the Python 2 and 3 documentation before 2016 has potentially misleading information about whether sorting occurs, as demonstrated by irreproducible cancer-res…CVE-2019-175144.7% likely

   Python Software Foundation

9. A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the han…CVE-2021-44847Toktok · 4.1% likely
10. Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege EscalationCVE-2023-2163Linux · CVSS 10 · 3.6% likely

    Linux

11. In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed.CVE-2018-182252.9% likely
12. In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reducti…CVE-2021-3114Golang · 2.7% likely

    Golang

13. net/sctp/sm_make_chunk.c in the Linux kernel before 2.6.34, when addip_enable and auth_enable are used, does not consider the amount of zero padding during calculation of chunk le…CVE-2011-15732.7% likely
14. A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated…CVE-2017-5462Mozilla · 2.6% likely

    Mozilla

15. ati_2d_blt in hw/display/ati_2d.c in QEMU 4.2.1 can encounter an outside-limits situation in a calculation. A guest can crash the QEMU process.CVE-2020-27616Qemu · 2.5% likely

    Qemu

16. Solana rBPF - Incorrect Calculation in sdiv instructionCVE-2022-23066solana-labs · CVSS 9.1 · 2.5% likely

    Solanalabs

17. libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might allow remote attackers to cause a denial…CVE-2017-83262.4% likely
18. A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated f…CVE-2017-89322.2% likely
19. When ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage() function in coders/palm.c, related to an inco…CVE-2017-115371.9% likely
20. Erroneous Proof of Work calculation in gethCVE-2020-26240ethereum · CVSS 5.3 · 1.9% likely

    Ethereum

21. An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to eq…CVE-2021-44504Fisglobal · 1.8% likely

    Fisglobal

22. Miscompilation of `i8x16.swizzle` and `select` with v128 inputs in WasmtimeCVE-2022-31104bytecodealliance · CVSS 4.8 · 1.8% likely

    Bytecodealliance

23. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privil…CVE-2021-31440Linux · CVSS 8.8 · 1.8% likely

    Linux

24. An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enab…CVE-2020-28393Siemens · 1.6% likely

    Siemens

25. Off-by-one error in the OpenType Sanitizer in Google Chrome before 18.0.1025.142 allows remote attackers to cause a denial of service or possibly have unspecified other impact via…CVE-2011-30621.6% likely
26. An issue was discovered in the orion crate before 0.11.2 for Rust. reset() calls cause incorrect results.CVE-2018-209991.6% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.