Improper Validation of Array Index

Every one of the 648 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web cont…CVE-2022-48503Apple · CVSS 8.8 · 3.2% likelycovered by CyberSIXT

   Apple

2. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 an…CVE-2021-35592Oracle Corporation · CVSS 6.3 · 52% likely

   Oracle

3. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35598Oracle Corporation · CVSS 6.3 · 51% likely

   Oracle

4. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35594Oracle Corporation · CVSS 6.3 · 51% likely

   Oracle

5. SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.CVE-2022-35737Sqlite · CVSS 7.5 · 24% likely

   Sqlite

6. Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, W…CVE-2014-6317Microsoft · 18% likely

   Microsoft

7. The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.CVE-2023-0755PTC · CVSS 9.8 · 12% likely

   PTC

8. RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution VulnerabilityCVE-2023-40477RARLAB · CVSS 7.8 · 10% likely

   Rarlab

9. The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO or LAYOUTGET operand in a UDP packet fro…CVE-2017-8797Linux · 9.5% likely

   Linux

10. An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…CVE-2017-16410Adobe · 8.5% likely

    Adobe

11. Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process…CVE-2014-4616Python · 7.8% likely

    Python1 bounty report

12. An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause t…CVE-2016-9053Aerospike · CVSS 9.8 · 7.2% likely

    Aerospike

13. An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versions, and 11.0.22 and…CVE-2017-16391Adobe · 6.7% likely

    Adobe

14. Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-38654Microsoft · CVSS 7.8 · 6.4% likely

    Microsoft

15. Array index error in the t42_parse_sfnts function in type42/t42parse.c in FreeType before 2.4.2 allows remote attackers to cause a denial of service (application crash) or possibl…CVE-2010-2806Freetype · 5.8% likely

    Freetype

16. Jet Database Engine Remote Code Execution VulnerabilityCVE-2019-0906Microsoft · CVSS 7.8 · 5.7% likely

    Microsoft

17. Array index error in smal_decode_segment function in LibRaw before 0.17.1 allows context-dependent attackers to cause memory errors and possibly execute arbitrary code via vectors…CVE-2015-8366Libraw · 5.1% likely

    Libraw

18. The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error fo…CVE-2018-12018Ethereum · 4.2% likely

    Ethereum

19. Integer signedness error in rfc2231_get_param from strings.c in PINE before 4.58 allows remote attackers to execute arbitrary code via an email that causes an out-of-bounds array…CVE-2003-0721Washington · 4.0% likely
20. An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-re…CVE-2020-11881Mikrotik · 3.8% likely

    Mikrotik

21. An issue was discovered in Foxit Reader before 9.1 and PhantomPDF before 9.1. This vulnerability allows remote attackers to execute arbitrary code. User interaction is required to…CVE-2018-7406Foxitsoftware · 3.7% likely

    Foxitsoftware

22. Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descr…CVE-2005-0369Armagetronad · CVSS 5.3 · 3.5% likely
23. An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the "skippy peanut butter" issue.CVE-2021-3121Golang · 3.4% likely

    Golang

24. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB r…CVE-2020-35636Cgal · CVSS 10 · 3.4% likely

    CGAL Project

25. Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_p…CVE-2019-17212Mbed · 3.1% likely

    Mbed

26. A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::r…CVE-2020-28601Cgal · CVSS 10 · 3.0% likely

    CGAL Project

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.