Time and State

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.CVE-2016-7547Trendmicro · 92% likely

   Trend Micro

2. The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote att…CVE-2015-5300Ntp · 9.1% likely

   Ntp

3. The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly mai…CVE-2016-1643Google · 2.7% likely

   Google

4. In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can…CVE-2016-1000345Bouncycastle · 2.6% likely

   Bouncycastle

5. In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of sig…CVE-2016-1000341Bouncycastle · 2.5% likely

   Bouncycastle

6. python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.CVE-2016-7036Python-Jose Project · 2.2% likely
7. The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signature…CVE-2016-7037Emarref · 0.7% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.