Improper Check or Handling of Exceptional Conditions

Every one of the 152 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic.CVE-2021-25370Samsung Mobile · CVSS 6.1 · 0.9% likely

   Samsung

2. An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access.CVE-2021-25372Samsung Mobile · CVSS 6.1 · 0.8% likely

   Samsung

3. An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.CVE-2022-22265Samsung Mobile · CVSS 5 · 0.4% likely

   Samsung

4. A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted r…CVE-2024-21894Ivanti · CVSS 8.2 · 19% likely

   Ivanti

5. An exploitable memory corruption vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader, version 9.4.1.16828. A specially crafted PDF document can trig…CVE-2019-5031Foxit · CVSS 8.8 · 6.0% likely
6. Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiationCVE-2023-49786asterisk · CVSS 7.5 · 5.3% likely

   Asterisk

7. A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send speciall…CVE-2024-22052Ivanti · CVSS 7.5 · 3.8% likely

   Ivanti

8. Spam protection, Anti-Spam, FireWall by CleanTalk <= 6.44 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Arbitrary Plugin InstallationCVE-2024-10781cleantalk · CVSS 8.1 · 3.7% likely

   CleanTalk

9. A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted re…CVE-2024-22053Ivanti · CVSS 8.2 · 3.5% likely

   Ivanti

10. An XML entity expansion or XEE vulnerability in SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated attacker to send specially c…CVE-2024-22023Ivanti · CVSS 5.3 · 3.0% likely

    Ivanti

11. Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject…CVE-2022-41777kujirahand · CVSS 7.5 · 1.7% likely

    Kujirahand

12. Http-proxy is a proxying library. Because of the way errors are handled in versions before 0.7.0, an attacker that forces an error can crash the server, causing a denial of servic…CVE-2017-16014HackerOne · 1.6% likely

    HackerOne

13. An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remot…CVE-2024-29205Ivanti · CVSS 7.5 · 1.6% likely

    Ivanti

14. PTC Axeda agent and Axeda Desktop Server Improper Check or Handling Of Exceptional ConditionsCVE-2022-25252PTC · CVSS 7.5 · 1.6% likely

    PTC

15. FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiationCVE-2023-51443signalwire · CVSS 7.5 · 1.5% likely

    Signalwire

16. When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any malformed data in the password file will be treated as valid.…CVE-2018-12551The Eclipse Foundation · 1.5% likely

    Eclipse Foundation

17. Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10…CVE-2020-2075Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LM… · 1.4% likely
18. Junos OS and Junos OS Evolved: RPD crash due to specific BGP UPDATE packetsCVE-2020-1644Juniper Networks · CVSS 7.5 · 1.3% likely

    Juniper Networks

19. Synapse vulnerable to denial of service (DoS) due to incorrect application of event authorization rulesCVE-2022-31152matrix-org · CVSS 6.4 · 1.2% likely

    Matrix-Org

20. A vulnerability has been identified in SCALANCE SC-600 (V2.0), SCALANCE XB-200 (V4.1), SCALANCE XC-200 (V4.1), SCALANCE XF-200BA (V4.1), SCALANCE XP-200 (V4.1), SCALANCE XR-300WG…CVE-2019-10927Siemens AG · 1.2% likely

    Siemens

21. An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service…CVE-2024-26007Fortinet · CVSS 5 · 1.2% likely

    Fortinet

22. PAN-OS: Local File Deletion VulnerabilityCVE-2023-0004Palo Alto Networks · CVSS 6.5 · 1.1% likely

    Palo Alto Networks

23. Junos OS: A crafted Ethernet OAM packet received by Junos may cause the Ethernet OAM connectivity fault management process (CFM) to core.CVE-2020-1639Juniper Networks · CVSS 7.5 · 1.1% likely

    Juniper Networks

24. Junos OS Evolved: Specially crafted packets may cause the AFT manager process to crash and restartCVE-2021-0286Juniper Networks · CVSS 7.5 · 1.1% likely

    Juniper Networks

25. Junos OS and Junos OS Evolved: MX Series with MPC10/MPC11, PTX10003, PTX10008: Line card may crash and restart when traffic is hitting a firewall filter having a term with syslog…CVE-2021-0264Juniper Networks · CVSS 5.9 · 1.0% likely

    Juniper Networks

26. A logic issue was addressed with improved checks. This issue is fixed in Safari 18.6, macOS Sequoia 15.6. A download's origin may be incorrectly associated.CVE-2025-43240Apple · CVSS 6.2 · 1.0% likely

    Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.