Possible (1 to 10%)

Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote atta…CVE-2004-0631Adobe · 9.8% likely

   Adobe

2. Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x"…CVE-2004-0769Mozilla · 9.1% likely

   Mozilla

3. Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.CVE-2004-0760Mozilla · 8.8% likely

   Mozilla

4. The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arb…CVE-2004-0630Adobe · 8.2% likely

   Adobe

5. Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a…CVE-2004-0629Adobe · 7.1% likely

   Adobe

6. Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5…CVE-2004-0599Greg Roelofs · 6.2% likely

   Greg Roelofs

7. The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dere…CVE-2004-0598Greg Roelofs · 6.1% likely

   Greg Roelofs

8. Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.CVE-2004-0763Mozilla · 5.7% likely

   Mozilla

9. Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to exe…CVE-2004-0757Mozilla · 5.3% likely

   Mozilla

10. The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null derefe…CVE-2004-0692Trolltech · 3.4% likely

    Trolltech

11. libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.CVE-2004-0768Greg Roelofs · 3.3% likely

    Greg Roelofs

12. Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.CVE-2004-0408Michael Bacarella · 3.3% likely
13. Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL)…CVE-2004-0764Mozilla · 3.2% likely

    Mozilla

14. mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.CVE-2004-0458Nicolas Boullis · CVSS 7.5 · 3.2% likely

    CWE-476

15. Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a…CVE-2004-0758Mozilla · 3.1% likely

    Mozilla

16. The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null derefe…CVE-2004-0693Trolltech · 2.9% likely

    Trolltech

17. ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attackers that the web server is an IIS serve…CVE-2003-0105Port80 Software · 2.5% likely
18. Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.CVE-2004-0794Luke Mewburn · 2.4% likely
19. CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate hist…CVE-2004-0778Gnu · 2.4% likely

    CWE-203GNU

20. Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.CVE-2004-0792Andrew Tridgell · 2.3% likely

    Andrew Tridgell

21. DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named…CVE-2004-0795Ibm · 2.2% likely

    IBM

22. The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted session…CVE-2004-0779Mozilla · 2.1% likely

    Mozilla

23. Clearswift MAILsweeper before 4.3.15 does not properly detect and filter ZIP 6.0 encoded files, which allows remote attackers to bypass intended policy.CVE-2003-0929Clearswift · 2.0% likely

    Clearswift

24. Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall…CVE-2004-0762Mozilla · 2.0% likely

    Mozilla

25. Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the use…CVE-2004-0743Apple · 2.0% likely

    Apple

26. SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.CVE-2004-0796Spamassassin · 1.9% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.