Possible (1 to 10%)

Every one of the 18 is a mark on the map. Named now: 1 to 18, most at risk first.

1. Multiple SSH2 servers and clients do not properly handle packets or data elements with incorrect length specifiers, which may allow remote attackers to cause a denial of service o…CVE-2002-1357Fissh · 9.8% likely

   CWE-119

2. Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demons…CVE-2002-1383Easy Software Products · 9.1% likely

   Easy Software Products

3. Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) long inputs durin…CVE-2002-1347Cyrusimap · 7.1% likely

   CWE-131Cyrusimap

4. Multiple buffer overflows in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allow remote attackers to execute arbitrary code via (1) long -t or -r parameters to slurpd, (2) a malicious…CVE-2002-1378Openldap · 7.0% likely

   Openldap

5. libmysqlclient client library in MySQL 3.x to 3.23.54, and 4.x to 4.0.6, does not properly verify length fields for certain responses in the (1) read_rows or (2) read_one_row rout…CVE-2002-1376Oracle · 6.8% likely

   Oracle

6. Multiple SSH2 servers and clients do not properly handle strings with null characters in them when the string length is specified by a length field, which could allow remote attac…CVE-2002-1360Fissh · 6.1% likely

   CWE-20

7. Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute ar…CVE-2002-1358Fissh · 5.8% likely

   CWE-20

8. Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct paramet…CVE-2002-1334Bizdesign · 4.7% likely
9. Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filenames containing (1) /absolute/path or (2…CVE-2002-1344Gnu · 4.2% likely

   GNU

10. OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows remote or local attackers to execute arbitrary code when libldap reads the .ldaprc file within applications that are running with e…CVE-2002-1379Openldap · 2.9% likely

    Openldap

11. Ethereal 0.9.7 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed packets to the (1) LMP, (2) PPP, or (3) T…CVE-2002-1356Ethereal Group · 2.9% likely

    Ethereal Group

12. Directory traversal vulnerabilities in multiple FTP clients on UNIX systems allow remote malicious FTP servers to create or overwrite files as the client user via filenames contai…CVE-2002-1345Ncftp Software · 2.8% likely
13. Multiple buffer overflows in Winamp 3.0, when displaying an MP3 in the Media Library window, allows remote attackers to execute arbitrary code via an MP3 file containing a long (1…CVE-2002-1177Nullsoft · 2.6% likely

    Nullsoft

14. Cross-site scripting (XSS) vulnerability in w3m 0.3.2 does not escape an HTML tag in a frame, which allows remote attackers to insert arbitrary web script or HTML and access files…CVE-2002-1335W3m · 2.5% likely

    W3m

15. Buffer overflow in Winamp 2.81 allows remote attackers to execute arbitrary code via a long Artist ID3v2 tag in an MP3 file.CVE-2002-1176Nullsoft · 2.3% likely

    Nullsoft

16. Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands.CVE-2002-1342Smb2www · 2.2% likely
17. Cross-site scripting (XSS) vulnerability in read_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert script and HTML via the (1) mailbox and (2)…CVE-2002-1341Squirrelmail · 2.0% likely

    Squirrelmail

18. Multiple integer signedness errors in the BGP dissector in Ethereal 0.9.7 and earlier allow remote attackers to cause a denial of service (infinite loop) via malformed messages.CVE-2002-1355Ethereal Group · 1.7% likely

    Ethereal Group

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.