Possible (1 to 10%)

Every one of the 46 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The L2TP protocol parser in tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a packet with invalid data to…CVE-2003-1029Lbl · 9.9% likely

   Lbl

2. Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is…CVE-2004-0069Hd Soft · 9.8% likely
3. PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the e…CVE-2004-0073Stoitsov · 8.8% likely
4. Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM p…CVE-2004-0008Ultramagnetic · 8.5% likely
5. Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailb…CVE-2003-0904Microsoft · 8.1% likely

   CWE-200Microsoft

6. Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1)…CVE-2004-0006Ultramagnetic · 7.6% likely
7. PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitr…CVE-2004-0030Phpgedview · 7.3% likely

   CWE-829Phpgedview

8. Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to c…CVE-2004-0007Ultramagnetic · 7.2% likely
9. Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command paramete…CVE-2004-00717.1% likely
10. The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via…CVE-2004-0057Lbl · 5.3% likely

    Lbl

11. Entrust Authority Security Manager (EASM) 6.0 does not properly require multiple master users to change the password of a master user, which could allow a master user to perform o…CVE-2002-0712Entrust · 5.3% likely

    Entrust

12. tcpdump before 3.8.1 allows remote attackers to cause a denial of service (infinite loop) via certain ISAKMP packets, a different vulnerability than CVE-2004-0057.CVE-2003-0989Redhat · 5.3% likely

    Red Hat

13. Stack-based buffer overflow in vfs_s_resolve_symlink of vfs/direntry.c for Midnight Commander (mc) 4.6.0 and earlier, and possibly later versions, allows remote attackers to execu…CVE-2003-1023Midnight Commander · 5.1% likely

    Midnight Commander

14. Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary…CVE-2004-0054Cisco · 4.6% likely

    Cisco

15. Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.1…CVE-2004-0056Nortel · 3.8% likely

    Nortel

16. Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP r…CVE-2004-0072Accipiter · 3.7% likely
17. The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute wit…CVE-2004-0055Lbl · 3.6% likely

    Lbl

18. Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filen…CVE-2004-0043Yahoo · 3.6% likely

    Yahoo

19. Pi3Web web server 2.0.2 Beta 1, when the Directory Index is configured to use the "Name" column and sort using the column title as a hyperlink, allows remote attackers to cause a…CVE-2003-1032Pi3 · 3.6% likely

    Pi3

20. Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php,…CVE-2004-0067Phpgedview · 3.1% likely

    CWE-79Phpgedview

21. Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.CVE-2004-0014Nd · 2.8% likely
22. Unknown vulnerability in minimalist mailing list manager 2.4, 2.2, and possibly other versions, allows remote attackers to execute arbitrary commands.CVE-2003-0902Minimalist · 2.7% likely
23. Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function…CVE-2004-0034Phorum · 2.5% likely

    Phorum

24. FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.CVE-2004-0037Opentext · 2.2% likely

    OpenText

25. The secldapclntd daemon in AIX 4.3, 5.1 and 5.2 uses an Internet socket when communicating with the loadmodule, which allows remote attackers to directly connect to the daemon and…CVE-2003-0119Ibm · 2.1% likely

    IBM

26. Nokia Gateway GPRS support node (GGSN) allows remote attackers to cause a denial of service (kernel panic) via a malformed IP packet with a 0xFF TCP option.CVE-2003-0368Nokia · 2.0% likely

    CWE-20Nokia

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.