Possible (1 to 10%)

Every one of the 62 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName param…CVE-2002-0772Hosting Controller · 9.2% likely

   Hosting Controller

2. Buffer overflow in OpenSSL 0.9.7 before 0.9.7-beta3, with Kerberos enabled, allows attackers to execute arbitrary code via a long master key.CVE-2002-0657Openssl · 9.2% likely

   OpenSSL

3. xfsmd for IRIX 6.5 through 6.5.16 allows remote attackers to execute arbitrary code via shell metacharacters that are not properly filtered from several calls to the popen() funct…CVE-2002-0652Sgi · 9.1% likely

   Sgi

4. The web-based configuration interface for the Cisco ATA 186 Analog Telephone Adaptor allows remote attackers to bypass authentication via an HTTP POST request with a single byte,…CVE-2002-0769Cisco · 8.5% likely

   Cisco

5. Cross-site scripting vulnerability in GoAhead Web Server 2.1 allows remote attackers to execute script as other web users via script in a URL that generates a "404 not found" mess…CVE-2002-0681Goahead Software · 8.3% likely

   Goahead

6. browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.CVE-2002-0775Hosting Controller · 8.3% likely

   Hosting Controller

7. OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, does not properly handle ASCII representations of integers on 64 bit platforms, which could allow attackers to cause a den…CVE-2002-0655Openssl · 8.2% likely

   OpenSSL

8. Cross-site scripting vulnerability in viewcvs.cgi for ViewCVS 0.9.2 allows remote attackers to inject script and steal cookies via the (1) cvsroot or (2) sortby parameters.CVE-2002-0771Viewcvs · 7.2% likely

   Viewcvs

9. Cross-site scripting vulnerability in guestbook.pl for Philip Chinery's Guestbook 1.1 allows remote attackers to execute Javascript or HTML via fields such as (1) Name, (2) EMail,…CVE-2002-0730Philip Chinery · 6.9% likely
10. CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument…CVE-2002-0677Caldera · 6.6% likely

    Caldera

11. Buffer overflow in lsmcode in AIX 4.3.3.CVE-2002-0747Ibm · 6.0% likely

    IBM

12. Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious…CVE-2002-0684Gnu · 5.9% likely

    GNU

13. Buffer overflow in Talentsoft Web+ 5.0 allows remote attackers to execute arbitrary code via an HTTP request with a long cookie.CVE-2002-0753Talentsoft · 5.9% likely

    Talentsoft

14. InterScan VirusWall 3.52 build 1462 allows remote attackers to bypass virus protection via e-mail messages with headers that violate RFC specifications by having (or missing) spac…CVE-2002-0637Trend Micro · 5.7% likely

    Trend Micro

15. Buffer overflows in Squid before 2.4.STABLE6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code (1) via the MSNT auth helper (msnt_aut…CVE-2002-0713Squid · 5.5% likely

    Squid

16. Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client t…CVE-2002-0770Id Software · 5.5% likely

    Id Software

17. imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters s…CVE-2002-0773Hosting Controller · 4.5% likely

    Hosting Controller

18. Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-0796Sun · 4.4% likely

    Sun Microsystems

19. Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS…CVE-2002-0686Iplanet · 4.3% likely

    Iplanet

20. SQL injection vulnerability in stored procedures for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 may allow authenticated users to execute arbitrary commands.CVE-2002-0645Microsoft · 3.8% likely

    Microsoft

21. Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.CVE-2002-0683Pacific Software · 3.7% likely
22. Directory traversal vulnerability in GoAhead Web Server 2.1 allows remote attackers to read arbitrary files via a URL with an encoded / (%5C) in a .. (dot dot) sequence. NOTE: it…CVE-2002-0680Goahead Software · 3.5% likely

    Goahead

23. Buffer overflow in the MIB parsing component of mibiisa for Solaris 5.6 through 8 allows remote attackers to gain root privileges.CVE-2002-0797Sun · 3.3% likely

    Sun Microsystems

24. iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in th…CVE-2002-0786Critical Path · 3.2% likely
25. Format string vulnerability in the logging() function in C-Note Squid LDAP authentication module (squid_auth_LDAP) 2.0.2 and earlier allows remote attackers to cause a denial of s…CVE-2002-0735C-Note · 2.9% likely
26. Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator…CVE-2002-0787Critical Path · 2.9% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.