Possible (1 to 10%)

Every one of the 38 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary…CVE-2001-0571Elron · 8.3% likely
2. Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.CVE-2001-0581Spytech · 7.1% likely
3. The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information vi…CVE-2001-0572Ssh · 7.1% likely

   Ssh

4. Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.CVE-2001-0534Lucent · 6.7% likely

   Lucent

5. Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.CVE-2001-0566Cisco · 6.4% likely

   CWE-20Cisco

6. Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.CVE-2001-0580Hughes Technologies · 5.3% likely

   Hughes

7. HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases v…CVE-2001-0608Hp · 4.3% likely

   HP

8. a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters.CVE-2001-0562Drummond Miles · 3.6% likely
9. Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.CVE-2001-0614Carello · 3.2% likely
10. Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within o…CVE-2001-0519Aladdin Knowledge Systems · 2.5% likely

    Aladdin Knowledge Systems

11. lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.CVE-2001-0579Sco · 2.4% likely

    Sco

12. Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.CVE-2001-0521Aladdin Knowledge Systems · 2.4% likely

    Aladdin Knowledge Systems

13. Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onlo…CVE-2001-0520Aladdin Knowledge Systems · 2.4% likely

    Aladdin Knowledge Systems

14. Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.CVE-2001-0606Sun · 2.2% likely

    Sun Microsystems

15. Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection reques…CVE-2001-0498Oracle · 2.1% likely

    Oracle

16. Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_versio…CVE-2001-0516Oracle · 2.1% likely

    Oracle

17. Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.CVE-2001-0515Oracle · 2.1% likely

    Oracle

18. Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the s…CVE-2001-0633Sun · 2.0% likely

    Sun Microsystems

19. eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could al…CVE-2001-0523Eeye Digital Security · 2.0% likely
20. Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privil…CVE-2001-0632Sun · 2.0% likely

    Sun Microsystems

21. Microsoft Windows 2000 telnet service creates named pipes with predictable names and does not properly verify them, which allows local users to execute arbitrary commands by creat…CVE-2001-0349Microsoft · 1.9% likely

    Microsoft

22. Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices.CVE-2001-0602Lotus · 1.9% likely

    Lotus

23. Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.CVE-2001-0601Lotus · 1.9% likely

    Lotus

24. Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, whi…CVE-2001-0598Symantec · 1.8% likely

    Symantec

25. eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, cont…CVE-2001-0524Eeye Digital Security · 1.8% likely
26. Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large…CVE-2001-0599Sybase · 1.7% likely

    Sybase

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.