Possible (1 to 10%)

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The xp_runwebtask stored procedure in the Web Tasks component of Microsoft SQL Server 7.0 and 2000, Microsoft Data Engine (MSDE) 1.0, and Microsoft Desktop Engine (MSDE) 2000 can…CVE-2002-1145Microsoft · 8.3% likely

   Microsoft

2. Multiple format string vulnerabilities in heartbeat 0.4.9 and earlier (claimed as buffer overflows in some sources) allow remote attackers to execute arbitrary code via certain pa…CVE-2002-1215Linux-Ha · 6.3% likely

   Linux-Ha

3. Buffer overflows in Fetchmail 6.0.0 and earlier allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) long headers that are not properly pr…CVE-2002-1174Fetchmail · 4.7% likely

   CWE-119Fetchmail

4. Multiple buffer overflows in Heimdal before 0.5, possibly in both the (1) kadmind and (2) kdc servers, may allow remote attackers to gain root access.CVE-2002-1225Kth · 4.5% likely

   Kth

5. The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote ses…CVE-2002-1150Microsoft · 3.8% likely

   Microsoft

6. Directory traversal vulnerability in GNU tar 1.13.19 through 1.13.25, and possibly later versions, allows attackers to overwrite arbitrary files during archive extraction via a (1…CVE-2002-0399Gnu · 3.6% likely

   GNU

7. Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ...…CVE-2002-0708Surfcontrol · 3.5% likely

   Surfcontrol

8. Buffer overflow in John Franks WN Server 1.18.2 through 2.0.0 allows remote attackers to execute arbitrary code via a long GET request.CVE-2002-1166John Franks · 3.3% likely
9. Avaya Cajun switches P880, P882, P580, and P550R 5.2.14 and earlier contain undocumented accounts (1) manuf and (2) diag with default passwords, which allows remote attackers to g…CVE-2002-1229Avaya · 3.3% likely

   Avaya

10. Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via a…CVE-2002-1167Ibm · 3.3% likely

    IBM

11. Buffer overflow in talkd on NetBSD 1.6 and earlier, and possibly other operating systems, may allow remote attackers to execute arbitrary code via a long inbound message.CVE-2002-1194Netbsd · 3.2% likely

    Netbsd

12. IPSEC implementations including (1) FreeS/WAN and (2) KAME do not properly calculate the length of authentication data, which allows remote attackers to cause a denial of service…CVE-2002-0666Frees Wan · 2.5% likely
13. The Web Reports Server for SurfControl SuperScout WebFilter stores the "scwebusers" username and password file in a web-accessible directory, which allows remote attackers to obta…CVE-2002-0705Surfcontrol · 2.5% likely

    Surfcontrol

14. Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other acces…CVE-2002-1226Kth · 2.4% likely

    Kth

15. The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames,…CVE-2002-1149Invision Power Services · 2.3% likely

    Invision Power Services

16. IBM AIX 4.3.3 and AIX 5 allows remote attackers to cause a denial of service (CPU consumption or crash) via a flood of malformed TCP packets without any flags set, which prevents…CVE-2002-1201Ibm · 2.1% likely

    IBM

17. Buffer overflow in (1) gv 3.5.8 and earlier, (2) gvv 1.0.2 and earlier, (3) ggv 1.99.90 and earlier, (4) gnome-gv, and (5) kghostview in kdegraphics 2.2.2 and earlier, allows atta…CVE-2002-0838Ggv · 2.0% likely
18. The getmxrecord function in Fetchmail 6.0.0 and earlier does not properly check the boundary of a particular malformed DNS packet from a malicious DNS server, which allows remote…CVE-2002-1175Fetchmail · 2.0% likely

    CWE-20Fetchmail

19. Directory traversal vulnerability in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to read arbitrary files via an…CVE-2002-1213Radiobird Software · 1.9% likely
20. Buffer overflow in RadioBird Software WebServer 4 Everyone 1.23 and 1.27, and other versions before 1.30, allows remote attackers to cause a denial of service (crash) via a long H…CVE-2002-1212Radiobird Software · 1.8% likely
21. The Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to cause a denial of service (CPU consumption) via large GET requests, possibly due to a buffer…CVE-2002-0707Surfcontrol · 1.8% likely

    Surfcontrol

22. Unknown vulnerability in NFS on Solaris 2.5.1 through Solaris 9 allows an NFS client to cause a denial of service by killing the lockd daemon.CVE-2002-1228Sun · 1.8% likely

    Sun Microsystems

23. The Sabserv client component in Sabre Desktop Reservation Software 4.2 through 4.4 allows remote attackers to cause a denial of service via malformed input to TCP port 1001.CVE-2002-1191Sabre · 1.8% likely
24. IBM SecureWay Firewall before 4.2.2 performs extra processing before determining that a packet is invalid and dropping it, which allows remote attackers to cause a denial of servi…CVE-2002-1203Ibm · 1.7% likely

    CWE-399IBM

25. Cross-site scripting (XSS) vulnerability in IBM Web Traffic Express Caching Proxy Server 3.6 and 4.x before 4.0.1.26 allows remote attackers to execute script as other users via a…CVE-2002-1168Ibm · 1.6% likely

    IBM

26. Cisco Unity 2.x and 3.x uses well-known default user accounts, which could allow remote attackers to gain access and place arbitrary calls.CVE-2002-1190Cisco · 1.6% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.