Incomplete Internal State Distinction

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Validating Admission Webhook does not observe some previous fieldsCVE-2021-25735Kubernetes · CVSS 6.5 · 5.4% likely

   Kubernetes

2. In Eclipse Californium version 2.3.0 to 2.6.0, the certificate based (x509 and RPK) DTLS handshakes accidentally fails, because the DTLS server side sticks to a wrong internal sta…CVE-2020-27222The Eclipse Foundation · 0.9% likely

   Eclipse Foundation

3. The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, includ…CVE-2024-22590CVSS 9.1 · 0.6% likely
4. Incomplete Internal State Distinction in ntpsecCVE-2023-4012NTPsec · CVSS 7.5 · 0.4% likely

   NTPsec

5. Frappe before 14.59.0 Safe Execution Flag Bypass in Server ScriptsCVE-2023-54406frappe · CVSS 4.9 · 0.3% likely

   Frappe

6. OpenClaw < 2026.3.31 - Configuration Rehydration via Empty-Array Revocation HandlingCVE-2026-41388OpenClaw · CVSS 6.5 · 0.3% likely

   OpenClaw

7. Junos OS: SRX 4600 and SRX 5000 Series: The receipt of specific genuine packets by SRXes configured for L2 transparency will cause a DoSCVE-2023-36834Juniper Networks · CVSS 6.5 · 0.3% likely

   Juniper Networks

8. OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom MigrationCVE-2026-41340OpenClaw · CVSS 6.5 · 0.3% likely

   OpenClaw

9. OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote OnboardingCVE-2026-41300OpenClaw · CVSS 6.5 · 0.3% likely

   OpenClaw

10. Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 Host Panic via thread.yieldCVE-2026-119140bytecodealliance · CVSS 4.8 · 0.2% likely

    Bytecodealliance

11. Incomplete internal state distinction in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an escalation of privil…CVE-2026-57893Intel(R) TDX Migration Trust Domain (MigTD) · CVSS 6.8 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.