Likely to be exploited (10% or more)

Every one of the 67 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager Grid Control 10.2.0.5 allows remote attack…CVE-2010-3600Oracle · 77% likely

   Oracle

2. Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect con…CVE-2010-4417Oracle · 76% likely

   Oracle

3. Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams…CVE-2011-0267Hp · 72% likely

   CWE-119HP

4. Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a…CVE-2011-0266Hp · 70% likely

   CWE-119HP

5. Stack-based buffer overflow in NetSupport Manager Agent for Linux 11.00, for Solaris 9.50, and for Mac OS X 11.00 allows remote attackers to execute arbitrary code via a long cont…CVE-2011-0404Netsupport · 65% likely

   CWE-119Netsupport

6. The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execut…CVE-2010-4335Cakephp · 55% likely

   CWE-20Cakephp

7. Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6.0, does not properly validate memory allocation for internal data structures,…CVE-2011-0027Microsoft · 54% likely

   CWE-20Microsoft

8. Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attacke…CVE-2010-4052Gnu · 51% likely

   CWE-399GNU1 bounty report

9. The RDS service (rds.exe) in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service (crash) via a packet with a large data size to TCP port 1530.CVE-2011-0514Hp · 49% likely

   CWE-119HP

10. Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2…CVE-2010-4701Microsoft · 48% likely

    CWE-119Microsoft

11. The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Go…CVE-2011-0096Microsoft · CVSS 6.1 · 47% likely

    CWE-79Microsoft

12. Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and e…CVE-2011-0517Sielcosistemi · 40% likely

    CWE-119Sielcosistemi

13. The regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (ap…CVE-2010-4051Gnu · 40% likely

    GNU

14. Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained…CVE-2010-2632Sun · 35% likely

    Sun Microsystems

15. HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Ed…CVE-2010-0111Symantec · 35% likely

    CWE-20Symantec

16. Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WD…CVE-2011-0026Microsoft · 34% likely

    CWE-189Microsoft

17. The DHCPv6 server in ISC DHCP 4.0.x and 4.1.x before 4.1.2-P1, 4.0-ESV and 4.1-ESV before 4.1-ESV-R1, and 4.2.x before 4.2.1b1 allows remote attackers to cause a denial of service…CVE-2011-0413Isc · 33% likely

    CWE-20Isc

18. Buffer overflow in VideoSpirit Pro 1.6.8.1 and possibly earlier versions, and VideoSpirit Lite 1.4.0.1 and possibly other versions, allows user-assisted remote attackers to execut…CVE-2011-0499Verytools · 31% likely

    CWE-119

19. Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a…CVE-2011-0346Microsoft · CVSS 8.1 · 31% likely

    CWE-416Microsoft

20. Buffer overflow in VideoSpirit Pro 1.6.8.1, 1.68, and earlier; and VideoSpirit Lite 1.4.0.1 and possibly other versions; allows user-assisted remote attackers to execute arbitrary…CVE-2011-0500Verytools · 31% likely

    CWE-119

21. The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote…CVE-2010-4669Microsoft · 29% likely

    CWE-399Microsoft

22. Buffer overflow in the sect_enttec_dmx_da function in epan/dissectors/packet-enttec.c in Wireshark 1.4.2 allows remote attackers to cause a denial of service (application crash) o…CVE-2010-4538Wireshark · 29% likely

    CWE-119Wireshark

23. Multiple directory traversal vulnerabilities in the (1) WebAccess Agent and (2) Document Viewer Agent components in Novell GroupWise before 8.02HP allow remote attackers to read a…CVE-2010-4715Novell · 28% likely

    CWE-22Novell

24. The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access G…CVE-2010-4566Citrix · 28% likely

    Citrix (NetScaler)

25. Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI display and have unspecified other impact via vectors related to the DOM implementati…CVE-2011-0347Microsoft · 22% likely

    Microsoft

26. Heap-based buffer overflow in HistorySvr.exe in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a long request to TCP port 777.CVE-2011-0406Wellintech · 21% likely

    CWE-119Wellintech

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.