Use of Inherently Dangerous Function

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.CVE-2017-1002157Fedora Modularity · 2.9% likely
2. The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-dependent and should not be relied upon for…CVE-2017-0904jtdowney · 2.4% likely

   1 bounty report

3. Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EXTEND-MIB enabled on its snmpd service, enabling an attacker with SNMP write abilities to execute co…CVE-2022-36310Airspan · 1.6% likely

   Airspan

4. AzeoTech DAQFactoryCVE-2021-42543AzeoTech · CVSS 7.8 · 0.8% likely

   AzeoTech

5. Ruijie Reyee OS Use of Inherently Dangerous FunctionCVE-2024-52324Ruijie · CVSS 9.8 · 0.7% likely

   Ruijie

6. ColdFusion Use of Inherently Dangerous Function Leads To Security feature bypassCVE-2021-40698Adobe · CVSS 7.4 · 0.6% likely

   Adobe

7. PostgreSQL libpq lo_* functions let server superuser overwrite client stack memoryCVE-2026-6477Postgresql · CVSS 8.8 · 0.5% likely

   Postgresql

8. A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate privileges on affected installations. Please note:…CVE-2025-49215Trend Micro, Inc. · CVSS 8.8 · 0.3% likely

   Trend Micro

9. IBM CICS TX code executionCVE-2025-1331IBM · CVSS 7.8 · 0.3% likely

   IBM

10. Code execution in IBM Desktop AppCVE-2026-11980IBM · CVSS 7.3 · 0.2% likely

    IBM

11. IBM Cognos Command Center code executionCVE-2025-1994IBM · CVSS 7.8 · 0.2% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.