Improper Neutralization of Invalid Characters in Identifiers in Web Pages

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Vim has OS Command Injection in netrwCVE-2026-28417vim · CVSS 4.4 · 1.4% likely

   Vim

2. Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xmlCVE-2023-31126xwiki · CVSS 9.1 · 0.8% likely

   Xwiki

3. Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local ac…CVE-2023-22840Intel(R) oneVPL GPU software · CVSS 3.3 · 0.4% likely
4. A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.CVE-2024-10941Mozilla · CVSS 4.3 · 0.4% likely

   Mozilla

5. Cisco Common Services Platform Collector Cross-Site Scripting VulnerabilityCVE-2025-20166Cisco · CVSS 5.4 · 0.4% likely

   Cisco

6. league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytesCVE-2026-71478thephpleague · CVSS 6.1 · 0.4% likely

   Thephpleague

7. Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow an unauthenticated user to potentially enable escalation of…CVE-2024-21864Intel(R) Arc(TM) & Iris(R) Xe Graphics software · CVSS 7.8 · 0.3% likely
8. Cisco Common Services Platform Collector Cross-Site Scripting VulnerabilityCVE-2025-20168Cisco · CVSS 5.4 · 0.3% likely

   Cisco

9. Cisco Common Services Platform Collector Cross-Site Scripting VulnerabilityCVE-2025-20167Cisco · CVSS 5.4 · 0.3% likely

   Cisco

10. A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or exec…CVE-2025-66606Yokogawa Electric Corporation · CVSS 2.1 · 0.3% likely

    Yokogawa Electric Corporation

11. Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalatio…CVE-2021-33158Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability… · CVSS 7.2 · 0.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.