CWE-1116 · weakness in Other weaknesses

Inaccurate Source Code Comments

3 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdi…CVE-2022-48339CVSS 7.8 · 1.1% likely
libxml streams use wrong content-type header when requesting a redirected resourceCVE-2025-1219PHP Group · CVSS 6.3 · 0.7% likely
PHP
PDFZorro PDFZorro Online r20220428 using TCPDF 6.2.5, despite having workflows claiming to correctly remove redacted information from a supplied PDF file, does not properly saniti…CVE-2022-30351CVSS 7.5 · 0.6% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.