Improper Check for Unusual or Exceptional Conditions

Every one of the 603 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted PacketCVE-2024-3393Palo Alto Networks · CVSS 8.7 · 30% likely

   Palo Alto Networks

2. The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that…CVE-2023-41993Apple · CVSS 8.8 · 24% likely

   Apple

3. The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate the…CVE-2023-41992Apple · CVSS 7.8 · 12% likely

   Apple

4. tls: fix handling of zero-length records on the rx_listCVE-2025-39682Linux · CVSS 9.8 · 3.3% likelycovered by CyberSIXT

   Linux3 articles

5. A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox E…CVE-2024-4367Mozilla · CVSS 5.6 · 71% likely

   Mozilla

6. Denial of service in Fastify via Content-Type headerCVE-2022-39288fastify · CVSS 7.5 · 59% likely

   Fastify

7. Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar`…CVE-2024-43044Jenkins Project · CVSS 8.8 · 29% likely

   Jenkins

8. In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.CVE-2017-1708517% likely
9. An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP server is enabled (default is disabled), WebSocket payloads of size 0 are mishandled (…CVE-2018-728711% likely
10. free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creationCVE-2026-40343free5gc · CVSS 6.9 · 8.6% likely

    Free5gc

11. In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additiona…CVE-2022-20130Android · 8.5% likely
12. is_blog_installed in wp-includes/functions.php in WordPress before 5.5.2 improperly determines whether WordPress is already installed, which might allow an attacker to perform a n…CVE-2020-280378.1% likely
13. A Denial of Service flaw was discovered in Elasticsearch. Using this vulnerability, an unauthenticated attacker could forcibly shut down an Elasticsearch node with a specifically…CVE-2022-23712Elastic · 7.5% likely

    Elastic

14. pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns.CVE-2019-196467.4% likely
15. In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could…CVE-2017-111446.2% likely
16. An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_…CVE-2019-201753.4% likely
17. An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation…CVE-2022-381522.9% likely
18. An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by…CVE-2021-275682.9% likely
19. Uncaught Exception in engine.ioCVE-2022-21676socketio · CVSS 7.5 · 2.9% likely

    Socket.io

20. An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper va…CVE-2021-32946Drawings SDK · 2.8% likely
21. An Improper Check for Unusual or Exceptional Conditions vulnerability exists in Schneider Electric's Modicon M221 product (all references, all versions prior to firmware V1.6.2.0)…CVE-2018-7789Schneider Electric SE · CVSS 4.8 · 2.8% likely

    Schneider Electric

22. Axios affected by Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639axios · CVSS 7.5 · 2.8% likelycovered by CyberSIXT

    Axios

23. In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters,…CVE-2019-11779The Eclipse Foundation · 2.7% likely

    Eclipse Foundation

24. In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the IWARP_MPA dissector could crash. This was addressed in epan/dissectors/packet-iwarp-mpa.c by validating a ULPDU length.CVE-2017-170842.7% likely
25. In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the NetBIOS dissector could crash. This was addressed in epan/dissectors/packet-netbios.c by ensuring that write operations are bo…CVE-2017-170832.7% likely
26. A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause a Denial of Service whe…CVE-2018-7855Modicon M580 Modicon M340 Modicon Quantum Modicon Premium · 2.6% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.