Improper Handling of Exceptional Conditions

Every one of the 441 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache Struts 2 - Remote Command ExecutionCVE-2017-5638Apache Software Foundation · CVSS 9.8 · 100% likelycovered by CyberSIXT

   Apache3 bounty reports1 article

2. OpenSMTPD 6.4.0-6.6.1 - Remote Code ExecutionCVE-2020-7247OpenBSD · CVSS 9.8 · 99% likely

   Openbsd

3. Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-38003Google · CVSS 8.8 · 39% likelycovered by CyberSIXT

   GoogleUNC35692 articles

4. In Progress MOVEit Transfer before 2021.0.9 (13.0.9), 2021.1.7 (13.1.7), 2022.0.7 (14.0.7), 2022.1.8 (14.1.8), and 2023.0.4 (15.0.4), it is possible for an attacker to invoke a me…CVE-2023-36933Progress · 72% likely

   Progress Software

5. ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in m…CVE-2018-0934Microsoft Corporation · 66% likely

   Microsoft

6. In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invo…CVE-2019-14287Sudo Project · 64% likely

   Sudo Project

7. An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE…CVE-2019-12815Proftpd · 57% likely

   Proftpd

8. An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long…CVE-2020-5807Rockwellautomation · 39% likely

   Rockwell Automation

9. Improper Handling of Exceptional Conditions in Newtonsoft.JsonCVE-2024-21907Newtonsoft · CVSS 7.5 · 33% likely
10. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 CPU (BMEx58*) and Modicon M580 communication module (BMENOC0311, BMENOC0321) (see notif…CVE-2019-6848Schneider-Electric · 32% likely

    Schneider Electric

11. An attacker can craft and send an OpenNamespace message to port 4241 with valid session-id that triggers an unhandled exception in CFTLDManager::HandleRequest function in RnaDaSvr…CVE-2020-5801Rockwellautomation · 30% likely

    Rockwell Automation

12. A CWE-755: Improper Handling of Exceptional Conditions vulnerability exists in Modicon M580 with firmware (version prior to V3.10), Modicon M340 (all firmware versions), and Modic…CVE-2019-6841Schneider-Electric · 24% likely

    Schneider Electric

13. React Router allows a DoS via cache poisoning by forcing SPA modeCVE-2025-43864remix-run · CVSS 7.5 · 20% likely

    Remix-Run

14. ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment.CVE-2019-14378Libslirp Project · 17% likely

    Libslirp Project

15. The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request an…CVE-2017-5664Apache Software Foundation · 17% likely

    Apache

16. Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or…CVE-2019-17195Connect2id · 11% likely

    Connect2id

17. SQLite 3.30.1 mishandles certain parser-tree rewriting, related to expr.c, vdbeaux.c, and window.c. This is caused by incorrect sqlite3WindowRewrite() error handling.CVE-2019-19924Sqlite · 11% likely

    Sqlite

18. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this vulnerability. The speci…CVE-2022-23121Netatalk · CVSS 9.8 · 8.5% likely

    Netatalk

19. It is possible to configure Apache CXF to use the com.sun.net.ssl implementation via 'System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");'.…CVE-2018-8039Apache Software Foundation · 8.2% likely

    Apache

20. DoS after non-blocking IO errorCVE-2021-30639Apache Software Foundation · 6.9% likely

    Apache

21. Axios up to and including 0.18.0 allows attackers to cause a denial of service (application crash) by continuing to accepting content after maxContentLength is exceeded.CVE-2019-10742axios · 6.1% likely

    Axios

22. An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Informat…CVE-2019-1376Microsoft · 5.4% likely

    Microsoft

23. An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Informat…CVE-2019-1313Microsoft · 5.3% likely

    Microsoft

24. Fine Free file before 5.17 allows context-dependent attackers to cause a denial of service (infinite recursion, CPU consumption, and crash) via a crafted indirect offset value in…CVE-2014-1943Fine Free File Project · 5.0% likely
25. Denial of Service (DoS)CVE-2020-7693Sockjs Project · CVSS 5.3 · 5.0% likely
26. Apache Tomcat: HTTP/2 excess header handling DoSCVE-2024-34750Apache Software Foundation · CVSS 7.5 · 4.6% likely

    Apache1 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.