Possible (1 to 10%)

Every one of the 50 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache 2 before 2.0.47, when running on an IPv6 host, allows attackers to cause a denial of service (CPU consumption by infinite loop) when the FTP proxy server fails to create an…CVE-2003-0254Apache · 9.2% likely

   Apache

2. The prefork MPM in Apache 2 before 2.0.47 does not properly handle certain errors from accept, which could lead to a denial of service.CVE-2003-0253Apache · 9.1% likely

   Apache

3. The web server for Cisco Aironet AP1x00 Series Wireless devices running certain versions of IOS 12.2 allow remote attackers to cause a denial of service (reload) via a malformed U…CVE-2003-0511Cisco · 9.0% likely

   Cisco

4. Buffer overflow in WiTango Application Server and Tango 2000 allows remote attackers to execute arbitrary code via a long cookie to Witango_UserReference.CVE-2003-0595Terascript · 7.8% likely

   CWE-120

5. The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via req…CVE-2003-0525Microsoft · 7.7% likely

   Microsoft

6. Format string vulnerability in ezbounce 1.0 through 1.50 allows remote attackers to execute arbitrary code via the "sessions" command.CVE-2003-0510Ezbounce · 7.4% likely
7. Buffer overflow in the WWWLaunchNetscape function of Adobe Acrobat Reader (acroread) 5.0.7 and earlier allows remote attackers to execute arbitrary code via a .pdf file with a lon…CVE-2003-0508Adobe · 7.0% likely

   Adobe

8. Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long th…CVE-2003-0503Microsoft · 6.9% likely

   Microsoft

9. Apache 2 before 2.0.47, and certain versions of mod_ssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive…CVE-2003-0192Apache · 6.0% likely

   Apache

10. SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (…CVE-2003-0509Cyberstrong · 5.9% likely
11. Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe a…CVE-2003-0496Microsoft · 4.6% likely

    Microsoft

12. Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC) port that leads to a buffer overflow.CVE-2003-0232Microsoft · 4.1% likely

    Microsoft

13. Multiple buffer overflows in IglooFTP PRO 3.8 allow remote FTP servers to execute arbitrary code via (1) a long FTP banner, or long responses to the client commands (2) USER, (3)…CVE-2003-0561Iglooftp · 3.8% likely
14. mpg123 0.59r allows remote attackers to cause a denial of service and possibly execute arbitrary code via an MP3 file with a zero bitrate, which creates a negative frame size.CVE-2003-0577Mpg123 · 3.7% likely

    Mpg123

15. Apple QuickTime / Darwin Streaming Server before 4.1.3g allows remote attackers to cause a denial of service (crash) via a .. (dot dot) sequence followed by an MS-DOS device name…CVE-2003-0502Apple · 3.4% likely

    Apple

16. The installation of Apple QuickTime / Darwin Streaming Server before 4.1.3f starts the administration server with a "Setup Assistant" page that allows remote attackers to set the…CVE-2003-0426Apple · 3.4% likely

    Apple

17. Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.CVE-2003-0523Early Impact · 3.3% likely

    Early Impact

18. Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.CVE-2003-0454Joe Rumsey · 3.3% likely
19. Cisco IOS 12.2 and earlier generates a "% Login invalid" message instead of prompting for a password when an invalid username is provided, which allows remote attackers to identif…CVE-2003-0512Cisco · 3.2% likely

    CWE-310Cisco

20. SQL injection vulnerability in shopexd.asp for VP-ASP allows remote attackers to gain administrator privileges via the id parameter.CVE-2003-0560Virtual Programming · 3.2% likely

    Virtual Programming

21. Apple QuickTime / Darwin Streaming Server before 4.1.3f allows remote attackers to cause a denial of service (crash) via an MS-DOS device name (e.g. AUX) in a request to HTTP port…CVE-2003-0421Apple · 2.9% likely

    Apple

22. Linux 2.4.x allows remote attackers to spoof the bridge Forwarding table via forged packets whose source addresses are the same as the target.CVE-2003-0552Redhat · 2.8% likely

    Red Hat

23. VisNetic WebSite 3.5 allows remote attackers to obtain the full pathname of the server via a request containing a folder that does not exist, which leaks the pathname in an error…CVE-2003-0456Deerfield · 2.8% likely

    CWE-200Deerfield

24. Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment with a long filename.CVE-2003-0553Netscape · 2.7% likely

    Netscape

25. X Fontserver for Truetype fonts (xfstt) 1.4 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a (1) FS_QueryXExtents8 or (2) FS_QueryXBi…CVE-2003-0581Xfstt · 2.5% likely
26. The STP protocol implementation in Linux 2.4.x does not properly verify certain lengths, which could allow attackers to cause a denial of service.CVE-2003-0551Redhat · 2.3% likely

    Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.