Skip to content

January 2011 · Band 4

Possible (1 to 10%)

256 CVEs

Each square is a CVE that EPSS puts between 1% and 10%.

Every one of the 256 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Multiple stack-based buffer overflows in the IMAP server component in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary…CVE-2010-4717Novell · 9.9% likely

    CWE-119Novell

  2. FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent d…CVE-2010-3879Libfuse Project · 9.8% likely

    CWE-59Libfuse Project

  3. The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-define…CVE-2010-3453Apache · 9.7% likely

    CWE-787Apache

  4. Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable i…CVE-2010-4325Novell · 9.5% likely

    CWE-119Novell

  5. storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (…CVE-2010-3676Mysql · 9.5% likely

    Mysql

  6. The email function in manage_sql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the (1) To o…CVE-2011-0018Openvas · 9.3% likely

    CWE-20Openvas

  7. Unrestricted file upload vulnerability in the EasyEdit module in Lomtec ActiveWeb Professional 3.0 allows remote attackers to execute arbitrary code by uploading an executable fil…CVE-2011-0678Lomtec · 9.2% likely
  8. admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db_type parameter, which reveals the installation path…CVE-2010-4349Mantisbt · 8.8% likely

    CWE-200Mantisbt

  9. MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<bod…CVE-2010-1677Mhonarc · 8.8% likely

    CWE-399Mhonarc

  10. Stack-based buffer overflow in NTWebServer.exe in the test web service in InduSoft NTWebServer, as distributed in Advantech Studio 6.1 and InduSoft Web Studio 7.0, allows remote a…CVE-2011-0488Advantech · 8.6% likely

    CWE-119Advantech

  11. Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot)…CVE-2010-4350Mantisbt · 7.9% likely

    CWE-22Mantisbt

  12. Heap-based buffer overflow in vidplin.dll in RealNetworks RealPlayer 11.0 through 11.1 and 14.0.x before 14.0.2, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to ex…CVE-2010-4393Realnetworks · 7.4% likely

    CWE-119Realnetworks

  13. The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary co…CVE-2011-0271Hp · 7.3% likely

    CWE-78HP

  14. Buffer overflow in the MAC-LTE dissector (epan/dissectors/packet-mac-lte.c) in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of…CVE-2011-0444Wireshark · 7.2% likely

    CWE-119Wireshark

  15. Untrusted search path vulnerability in ImgBurn.exe in ImgBurn 2.4.0.0, 2.5.4.0, and other versions allows local users, and possibly remote attackers, to execute arbitrary code and…CVE-2011-0403Imgburn · 6.9% likely
  16. Multiple stack-based buffer overflows in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a Conte…CVE-2010-4712Novell · 6.9% likely

    CWE-119Novell

  17. Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 9.0, 9.1, 9.2.4, 10.0.2, 10.3.2, and 10.3.3 allows remote attackers to affect confide…CVE-2010-4437Oracle · 6.9% likely

    Oracle

  18. Stack-based buffer overflow in the loadit function in plug-ins/common/sphere-designer.c in the SPHERE DESIGNER plugin in GIMP 2.6.11 allows user-assisted remote attackers to cause…CVE-2010-4541Gimp · 6.8% likely

    CWE-787GIMP

  19. Integer overflow in base/ftstream.c in libXft (aka the X FreeType library) in FreeType before 2.4 allows remote attackers to cause a denial of service (application crash) or possi…CVE-2010-3311Freetype · 6.7% likely

    CWE-189Freetype

  20. Multiple stack-based buffer overflows in Novell GroupWise before 8.02HP allow remote attackers to execute arbitrary code via a long HTTP Host header to (1) gwpoa.exe in the Post O…CVE-2010-4714Novell · 6.1% likely

    CWE-119Novell

  21. Stack-based buffer overflow in the load_preset_response function in plug-ins/lighting/lighting-ui.c in the "LIGHTING EFFECTS > LIGHT" plugin in GIMP 2.6.11 allows user-assisted re…CVE-2010-4540Gimp · 6.1% likely

    CWE-787GIMP

  22. Directory traversal vulnerability in module.php in PhpGedView 4.2.3 and possibly other versions, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files…CVE-2011-0405Phpgedview · 6.1% likely

    CWE-22Phpgedview

  23. Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction…CVE-2010-2643Redhat · 6.0% likely

    CWE-189Red Hat

  24. Multiple heap-based buffer overflows in cdg.c in the CDG decoder in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash)…CVE-2011-0021Videolan · 5.8% likely

    CWE-119Videolan

  25. Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) o…CVE-2010-3907Videolan · 5.8% likely

    CWE-189Videolan

  26. Stack-based buffer overflow in Nokia Multimedia Player 1.00.55.5010, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and po…CVE-2011-0498Nokia · 5.7% likely

    CWE-119Nokia

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.