Undefined Behavior for Input to API

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to gain remote code execution on affected installations.CVE-2025-47865Trend Micro, Inc. · CVSS 7.5 · 2.0% likely

   Trend Micro

2. Denial of Service when processing malformed Role namesCVE-2020-7925MongoDB Inc. · CVSS 7.5 · 1.7% likely

   MongoDB

3. Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCVE-2026-42009Red Hat · CVSS 7.5 · 1.3% likely

   Red Hat

4. ClamAV HTML Parser Denial of Service VulnerabilityCVE-2024-20380Cisco · CVSS 7.5 · 1.1% likely

   Cisco

5. A flaw was found in the `/v2/_catalog` endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned (query string: `n`). This…CVE-2023-2253Redhat · CVSS 6.5 · 0.9% likely

   Red Hat

6. Undefined Behavior for Input to API in MuttCVE-2023-4874Mutt · CVSS 4.3 · 0.8% likely

   Mutt

7. Zip Bomb Vulnerability in gradio-app/gradioCVE-2024-10569gradio-app · CVSS 7.5 · 0.7% likely

   Gradio-App

8. Missing Authorization in Execute Monitor API in OpenSearch Alerting PluginCVE-2026-19311AWS · CVSS 8.1 · 0.6% likely

   AWS

9. Undefined Behavior for Input to API in MuttCVE-2023-4875Mutt · CVSS 2.2 · 0.6% likely

   Mutt

10. Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflowCVE-2024-3099mlflow · CVSS 5.4 · 0.4% likely

    MLflow

11. In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosure no additional execution privileges n…CVE-2023-52533Unisoc (Shanghai) Technologies Co., Ltd. · CVSS 5.3 · 0.4% likely

    Unisoc (Shanghai) Technologies Co., Ltd.

12. Undefined behavior when users supply invalid resource handles in TensorFlowCVE-2022-29207tensorflow · CVSS 5.5 · 0.3% likely

    TensorFlow

13. An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker to upload arbitrary files on affected installations.CVE-2025-47866Trend Micro, Inc. · CVSS 4.3 · 0.3% likely

    Trend Micro

14. HPE NonStop TSQLFIL - Memory corruption vulnerabilityCVE-2026-73797Hewlett Packard Enterprise · CVSS 5.3 · 0.1% likely

    Hewlett Packard Enterprise

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.