Likely to be exploited (10% or more)

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.CVE-2000-0917Caldera · 79% likely

   Caldera

2. File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share acces…CVE-2000-0979Microsoft · 75% likely

   Microsoft

3. Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.CVE-2000-1089Microsoft · 75% likely

   Microsoft

4. IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Se…CVE-2000-0886Microsoft · 69% likely

   Microsoft

5. IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded charact…CVE-2000-0884Microsoft · 63% likely

   Microsoft

6. The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.CVE-2000-0869Suse · 51% likely

   SUSE

7. IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if…CVE-2000-0970Microsoft · 46% likely

   Microsoft

8. The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-…CVE-2000-0868Suse · 45% likely

   SUSE

9. A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and…CVE-2000-0951Microsoft · 44% likely

   Microsoft

10. The Windows 2000 telnet client attempts to perform NTLM authentication by default, which allows remote attackers to capture and replay the NTLM challenge/response via a telnet://…CVE-2000-0834Microsoft · 40% likely

    Microsoft

11. mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular…CVE-2000-0913Apache · 36% likely

    Apache

12. Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, a…CVE-2000-1034Microsoft · 27% likely

    Microsoft

13. named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on…CVE-2000-0887Isc · 23% likely

    Isc

14. The CiWebHitsFile component in Microsoft Indexing Services for Windows 2000 allows remote attackers to conduct a cross site scripting (CSS) attack via a CiRestriction parameter in…CVE-2000-0942Microsoft · 22% likely

    Microsoft

15. Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port…CVE-2000-0983Microsoft · 21% likely

    Microsoft

16. PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly writ…CVE-2000-0967Php · 21% likely

    PHP

17. Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer…CVE-2000-1113Microsoft · 19% likely

    Microsoft

18. Vulnerability in Microsoft Windows NT 4.0 allows remote attackers to cause a denial of service in IIS by sending it a series of malformed requests which cause INETINFO.EXE to fail…CVE-2000-0858Microsoft · 19% likely

    Microsoft

19. Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be genera…CVE-2000-0973Daniel Stenberg · 18% likely

    Daniel Stenberg

20. Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbit…CVE-2000-1058Hp · 16% likely

    HP

21. Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buff…CVE-2000-1149Microsoft · 16% likely

    Microsoft

22. Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via fun…CVE-2000-0844Caldera · 16% likely

    CWE-264Caldera

23. Race condition in Microsoft Windows Media server allows remote attackers to cause a denial of service in the Windows Media Unicast Service via a malformed request, aka the "Unicas…CVE-2000-0849Microsoft · 15% likely

    Microsoft

24. Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" co…CVE-2000-1006Microsoft · 15% likely

    Microsoft

25. Microsoft Windows Media Player 7 allows attackers to cause a denial of service in RTF-enabled email clients via an embedded OCX control that is not closed properly, aka the "OCX A…CVE-2000-0929Microsoft · 14% likely

    Microsoft

26. Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, a…CVE-2000-1112Microsoft · 14% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.