Possible (1 to 10%)

Every one of the 49 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.CVE-2000-1093Aol · 8.1% likely

   Aol

2. bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers to determine the existence of files and u…CVE-2000-1177Bb4 · 8.0% likely
3. Buffer overflow in TransSoft Broker FTP Server before 4.3.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long command.CVE-2000-1116Transsoft · 7.9% likely

   Transsoft

4. Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.CVE-2000-1147Microsoft · 7.9% likely

   Microsoft

5. loadpage.cgi CGI program in EZshopper 3.0 and 2.0 allows remote attackers to list and read files in the EZshopper data directory by inserting a "/" in front of the target filename…CVE-2000-1092Alex Heiphetz Group · 7.5% likely
6. Vulnerability in auto_parms and set_parms in HP-UX 11.00 and earlier allows remote attackers to execute arbitrary commands or cause a denial of service.CVE-2000-1126Hp · 5.8% likely

   HP

7. Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.CVE-2000-1176Yabb · 5.7% likely

   Yabb

8. The default configuration for PostACI webmail system installs the /includes/global.inc configuration file within the web root, which allows remote attackers to read sensitive info…CVE-2000-1100Trlinux · 5.7% likely
9. Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a…CVE-2000-1104Microsoft · 5.6% likely

   Microsoft

10. The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function i…CVE-2000-1083Microsoft · 5.5% likely

    Microsoft

11. The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo func…CVE-2000-1085Microsoft · 5.3% likely

    Microsoft

12. The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo fu…CVE-2000-1081Microsoft · 5.2% likely

    Microsoft

13. Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header.CVE-2000-1186Phf · 3.5% likely
14. Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.CVE-2000-1157Network Associates · 3.5% likely

    Network Associates

15. Buffer overflow in Gaim 0.10.3 and earlier using the OSCAR protocol allows remote attackers to conduct a denial of service and possibly execute arbitrary commands via a long HTML…CVE-2000-1172Rob Flynn · 3.1% likely

    Rob Flynn

16. Unify ServletExec AS v3.0C allows remote attackers to read source code for JSP pages via an HTTP request that ends with characters such as ".", or "+", or "%20".CVE-2000-1114Unify · 2.9% likely

    Unify

17. The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 allows malicious web site operators to determine the existence of files on the c…CVE-2000-1117Ibm · 2.9% likely

    CWE-203IBM

18. The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo…CVE-2000-1088Microsoft · 2.8% likely

    Microsoft

19. The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminf…CVE-2000-1087Microsoft · 2.8% likely

    Microsoft

20. The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminf…CVE-2000-1086Microsoft · 2.8% likely

    Microsoft

21. The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo functi…CVE-2000-1084Microsoft · 2.8% likely

    Microsoft

22. The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo funct…CVE-2000-1082Microsoft · 2.8% likely

    Microsoft

23. document.d2w CGI program in the IBM Net.Data db2www package allows remote attackers to determine the physical path of the web server by sending a nonexistent command to the progra…CVE-2000-1110Ibm · 2.7% likely

    IBM

24. McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.CVE-2000-1129Network Associates · 2.5% likely

    Network Associates

25. RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.CVE-2000-1154Joe Kloss · 2.5% likely
26. Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.CVE-2000-1188I-Soft · 2.4% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.