Possible (1 to 10%)

Every one of the 42 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in the mylo_log logging function for mod_mylo 0.2.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.CVE-2003-0651Mod Mylo · 8.6% likely
2. Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks…CVE-2003-0625Hadrons · 7.1% likely

   CWE-193

3. Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database u…CVE-2003-0634Oracle · 6.9% likely

   Oracle

4. Buffer overflow in the HTTP server for Cisco IOS 12.2 and earlier allows remote attackers to execute arbitrary code via an extremely long (2GB) HTTP GET request.CVE-2003-0647Cisco · 5.9% likely

   Cisco

5. Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers…CVE-2003-0632Oracle · 4.7% likely

   Oracle

6. Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form's action parameter.CVE-2003-0615Cgi.pm · 4.4% likely
7. Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.CVE-2003-0614Gallery Project · 3.9% likely

   Gallery Project

8. Heap-based buffer overflow in ePO agent for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request containing long pa…CVE-2003-0149Mcafee · 3.7% likely

   Mcafee

9. Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code…CVE-2003-0650Gamespy · 3.7% likely

   Gamespy

10. Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable.CVE-2003-0609Sun · 3.6% likely

    Sun Microsystems

11. netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port…CVE-2002-1566Netris · 3.4% likely
12. Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not…CVE-2003-0672Leon J Breedt · 3.1% likely
13. Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format str…CVE-2003-0616Mcafee · 3.0% likely

    Mcafee

14. KDE Konqueror for KDE 3.1.2 and earlier does not remove authentication credentials from URLs of the "user:password@host" form in the HTTP-Referer header, which could allow remote…CVE-2003-0459Kde · 2.9% likely

    Kde

15. Heap-based buffer overflow in the name services daemon (nsd) in SGI IRIX 6.5.x through 6.5.21f, and possibly earlier versions, allows attackers to gain root privileges via the AUT…CVE-2003-0575Sgi · 2.9% likely

    Sgi

16. Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive…CVE-2003-0633Oracle · 2.6% likely

    Oracle

17. Multiple buffer overflows in ActiveX controls used by Trend Micro HouseCall 5.5 and 5.7, and Damage Cleanup Server 1.0, allow remote attackers to execute arbitrary code via long p…CVE-2003-0646Trend Micro · 2.6% likely

    Trend Micro

18. Multiple buffer overflows in Novell iChain 2.1 before Field Patch 3, and iChain 2.2 before Field Patch 1a, allow attackers to cause a denial of service (ABEND) and possibly execut…CVE-2003-0638Novell · 2.5% likely

    Novell

19. Buffer overflow in autorespond may allow remote attackers to execute arbitrary code as the autorespond user via qmail.CVE-2003-0654Autorespond · 2.4% likely
20. Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server respo…CVE-2003-0685Netris · 2.4% likely
21. Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the ta…CVE-2003-0468Wietse Venema · 2.4% likely
22. Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.CVE-2003-0610Mcafee · 2.4% likely

    Mcafee

23. BEA WebLogic Server and Express, when using NodeManager to start servers, provides Operator users with privileges to overwrite usernames and passwords, which may allow Operators t…CVE-2003-0640Bea · 2.0% likely

    Bea

24. The C-Media PCI sound driver in Linux before 2.4.21 does not use the get_user function to access userspace, which crosses security boundaries and may facilitate the exploitation o…CVE-2003-0699Redhat · 2.0% likely

    Red Hat

25. The connection tracking core of Netfilter for Linux 2.4.20, with CONFIG_IP_NF_CONNTRACK enabled or the ip_conntrack module loaded, allows remote attackers to cause a denial of ser…CVE-2003-0187Linux · 1.9% likely

    Linux

26. Unknown vulnerability in ip_nat_sack_adjust of Netfilter in Linux kernels 2.4.20, and some 2.5.x, when CONFIG_IP_NF_NAT_FTP or CONFIG_IP_NF_NAT_IRC is enabled, or the ip_nat_ftp o…CVE-2003-0467Linux · 1.9% likely

    Linux

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.