Likely to be exploited (10% or more)

Every one of the 51 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as…CVE-2001-0797Sgi · 95% likely

   Sgi

2. Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by req…CVE-2002-0568Oracle · 75% likely

   Oracle

3. wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).CVE-2001-0550Washington University · 74% likely

   Washington University

4. Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.CVE-2001-0731Apache · 57% likely

   Apache

5. Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a goph…CVE-2002-0371Microsoft · 54% likely

   Microsoft

6. The default configuration of Oracle 9i Application Server 1.0.2.x allows remote anonymous users to access sensitive services without authentication, including Dynamic Monitoring S…CVE-2002-0563Oracle · 51% likely

   CWE-287Oracle

7. IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request w…CVE-2002-0422Microsoft · 51% likely

   CWE-200Microsoft

8. Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that spe…CVE-2002-0022Microsoft · 40% likely

   Microsoft

9. Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security che…CVE-2002-0023Microsoft · 39% likely

   Microsoft

10. SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfe…CVE-2002-0055Microsoft · 38% likely

    CWE-669Microsoft

11. Information leaks in IIS 4 through 5.1 allow remote attackers to obtain potentially sensitive information or more easily conduct brute force attacks via responses from the server…CVE-2002-0419Microsoft · 37% likely

    CWE-200Microsoft

12. Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.CVE-2001-0508Microsoft · 32% likely

    Microsoft

13. Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer…CVE-2001-0727Microsoft · 31% likely

    Microsoft

14. Apache before 1.3.20 on Windows and OS/2 systems allows remote attackers to cause a denial of service (GPF) via an HTTP request for a URI that contains a large number of / (slash)…CVE-2001-1342Apache · 30% likely

    Apache

15. The dbm and shm session cache code in mod_ssl before 2.8.7-1.3.23, and Apache-SSL before 1.3.22+1.46, does not properly initialize memory using the i2d_SSL_SESSION function, which…CVE-2002-0082Apache-Ssl · 30% likely
16. orderdetails.aspx, as made available to Microsoft .NET developers as example code and demonstrated on www.ibuyspystore.com, allows remote attackers to view the orders of other use…CVE-2002-0409Microsoft · 28% likely

    Microsoft

17. Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a mul…CVE-2002-0081Php · 24% likely

    PHP

18. Internet Explorer 5.01 through 6 allows remote attackers to cause a denial of service (application crash) via Javascript in a web page that calls location.replace on itself, causi…CVE-2002-0461Microsoft · 24% likely

    Microsoft

19. XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifyin…CVE-2002-0057Microsoft · 23% likely

    Microsoft

20. Internet Explorer 6.0 and earlier does not properly handle VBScript in certain domain security checks, which allows remote attackers to read arbitrary files.CVE-2002-0052Microsoft · 22% likely

    Microsoft

21. The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, a…CVE-2002-0078Microsoft · 22% likely

    Microsoft

22. IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the /iisadmpwd directory, inclu…CVE-2002-0421Microsoft · 20% likely

    Microsoft

23. Nortel CVX 1800 is installed with a default "public" community string, which allows remote attackers to read usernames and passwords and modify the CVX configuration.CVE-2002-0540Nortel · 20% likely

    Nortel

24. Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when…CVE-2001-1088Microsoft · 20% likely

    Microsoft

25. Internet Explorer 5.5 and 6.0 allows remote attackers to read certain files and spoof the URL in the address bar by using the Document.open function to pass information between tw…CVE-2002-0027Microsoft · 19% likely

    Microsoft

26. Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or Rich Text…CVE-2002-1056Microsoft · 19% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.