Likely to be exploited (10% or more)

Every one of the 23 is a mark on the map. Named now: 1 to 23, most at risk first.

1. The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root priv…CVE-2003-0722Sun · 89% likely

   Sun Microsystems

2. Multiple buffer overflows in WS_FTP 3 and 4 allow remote authenticated users to cause a denial of service and possibly execute arbitrary code via long (1) APPE (append) or (2) STA…CVE-2003-0772Ipswitch · 85% likely

   Ipswitch

3. Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a lo…CVE-2003-0780Mysql · 78% likely

   Mysql

4. Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.CVE-2003-0727Oracle · 68% likely

   Oracle

5. The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.CVE-2003-0694Sendmail · 66% likely

   Sendmail

6. ProFTPD 1.2.7 through 1.2.9rc2 does not properly translate newline characters when transferring files in ASCII mode, which allows remote attackers to execute arbitrary code via a…CVE-2003-0831Proftpd Project · 57% likely

   CWE-119Proftpd

7. Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Microsoft Visual Basic for Applications (VBA) SDK 5.0 through 6.3 allows remote attackers to execute arbitrary code via a doc…CVE-2003-0347Microsoft · 55% likely

   Microsoft

8. Buffer overflow in the RTSP protocol parser for the View Source plug-in (vsrcplin.so or vsrcplin3260.dll) for RealNetworks Helix Universal Server 9 and RealSystem Server 8, 7 and…CVE-2003-0725Realnetworks · 49% likely

   Realnetworks

9. Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC re…CVE-2003-0528Microsoft · 41% likely

   Microsoft

10. Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC…CVE-2003-0715Microsoft · 40% likely

    Microsoft

11. Buffer overflow in the ActiveX control for Microsoft Access Snapshot Viewer for Access 97, 2000, and 2002 allows remote attackers to execute arbitrary code via long parameters to…CVE-2003-0665Microsoft · 30% likely

    Microsoft

12. Cross-site scripting (XSS) vulnerability in Apache Tomcat 4.1 allows remote attackers to execute arbitrary web script and steal cookies via a URL with encoded newlines followed by…CVE-2002-1567Apache · 27% likely

    Apache

13. Buffer overflow in PAM SMB module (pam_smb) 1.1.6 and earlier, when authenticating to a remote service, allows remote attackers to execute arbitrary code.CVE-2003-0686Dave Airlie · 27% likely
14. The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers…CVE-2003-0661Microsoft · 25% likely

    Microsoft

15. A "potential buffer overflow in ruleset parsing" for Sendmail 8.12.9, when using the nonstandard rulesets (1) recipient (2), final, or (3) mailer-specific envelope recipients, has…CVE-2003-0681Sendmail · 22% likely

    Sendmail

16. Buffer overflow in Microsoft Wordperfect Converter allows remote attackers to execute arbitrary code via modified data offset and data size parameters in a Corel WordPerfect file.CVE-2003-0666Microsoft · 22% likely

    Microsoft

17. Microsoft ASP.Net 1.1 allows remote attackers to bypass the Cross-Site Scripting (XSS) and Script Injection protection feature via a null character in the beginning of a tag name.CVE-2003-0768Microsoft · 13% likely

    Microsoft

18. Buffer overflow in PINE before 4.58 allows remote attackers to execute arbitrary code via a malformed message/external-body MIME type.CVE-2003-0720University Of Washington · 13% likely

    University Of Washington

19. Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the doc…CVE-2003-0801Nokia · 12% likely

    CWE-79Nokia

20. lsh daemon (lshd) does not properly return from certain functions in (1) read_line.c, (2) channel_commands.c, or (3) client_keyexchange.c when long input is provided, which could…CVE-2003-0826Gnu · 12% likely

    GNU

21. A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory…CVE-2003-0693Openbsd · 11% likely

    Openbsd

22. FUNC.pm in IkonBoard 3.1.2a and earlier, including 3.1.1, does not properly cleanse the "lang" cookie when it contains illegal characters, which allows remote attackers to execute…CVE-2003-0770Ikonboard.com · 11% likely

    Ikonboard.com

23. Buffer overflow in Tellurian TftpdNT 1.8 allows remote attackers to execute arbitrary code via a TFTP request with a long filename.CVE-2003-0729Tellurian · 10% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.