Possible (1 to 10%)

Every one of the 350 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer overflow in Essentia Web Server 2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long URL.CVE-2002-0313Essen · 9.8% likely
2. Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows re…CVE-2004-0903Mozilla · 9.7% likely

   Mozilla

3. A typographical error in the script source access permissions for Internet Information Server (IIS) 5.0 does not properly exclude .COM files, which allows attackers with only writ…CVE-2002-1180Microsoft · 9.7% likely

   Microsoft

4. Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large number of OSPF neighbor announcements.CVE-2003-0100Cisco · 9.6% likely

   Cisco

5. Pine 4.44 and earlier allows remote attackers to cause a denial of service (core dump and failed restart) via an email message with a From header that contains a large number of q…CVE-2002-1320University Of Washington · 9.6% likely

   University Of Washington

6. BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT…CVE-2002-1220Isc · 9.6% likely

   Isc

7. PHP 3.x (PHP3) on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. (dot dot) attack containing "%5c" (encoded backslash) sequences.CVE-2001-0042Apache · 9.6% likely

   Apache

8. Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences…CVE-2002-1178Jetty · 9.5% likely

   Jetty

9. Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to e…CVE-2004-0783Gnome · 9.4% likely

   CWE-787Gnome

10. Buffer overflow in the Database Console Command (DBCC) that handles user inputs in Microsoft SQL Server 7.0 and 2000, including Microsoft Data Engine (MSDE) 1.0 and Microsoft Desk…CVE-2002-1137Microsoft · 9.4% likely

    Microsoft

11. Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.CVE-2004-0129Phpmyadmin · 9.3% likely

    Phpmyadmin

12. Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute ar…CVE-2004-0782Gnome · 9.2% likely

    Gnome

13. Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format strin…CVE-2004-0159Samhain Labs · 9.0% likely
14. Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.CVE-2004-0643Mit · 8.9% likely

    CWE-415Mit

15. Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.…CVE-2004-0309Zonelabs · 8.8% likely

    Zonelabs

16. Directory traversal vulnerability in kpf for KDE 3.0.1 through KDE 3.0.3a allows remote attackers to read arbitrary files as the kpf user via a URL with a modified icon parameter.CVE-2002-1224Kde · 8.8% likely

    Kde

17. Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP…CVE-2002-1222Cisco · 8.6% likely

    CWE-119Cisco

18. Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.CVE-2004-0045Isc · 8.6% likely

    Isc

19. The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitra…CVE-2003-0143Qualcomm · 8.6% likely

    Qualcomm, Inc.

20. IIS 3.x and 4.x does not distinguish between pages requiring encryption and those that do not, which allows remote attackers to cause a denial of service (resource exhaustion) via…CVE-1999-1537Microsoft · 8.5% likely

    Microsoft

21. PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the…CVE-2004-0128Phpgedview · 8.3% likely

    Phpgedview

22. Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 a…CVE-2004-0642Mit · 8.3% likely

    CWE-415Mit

23. jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attacker…CVE-2002-1369Easy Software Products · 8.2% likely

    Easy Software Products

24. Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote atta…CVE-2004-0687X.org · 8.1% likely

    X.org

25. Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arb…CVE-2004-0904Mozilla · 8.0% likely

    Mozilla

26. Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, Re…CVE-2004-0193Iss · 8.0% likely

    Iss

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.