Likely to be exploited (10% or more)

Every one of the 48 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Jav…CVE-2010-4452Sun · 83% likely

   Sun Microsystems

2. HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attacke…CVE-2011-0276Hp · 82% likely

   HP

3. The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "…CVE-2011-0923Hp · 81% likely

   CWE-20HP

4. Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft W…CVE-2011-0654Microsoft · 68% likely

   CWE-119Microsoft

5. The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.CVE-2011-0922Hp · 64% likely

   CWE-20HP

6. The irccd.exe service in EMC Replication Manager Client before 5.3 and NetWorker Module for Microsoft Applications 2.1.x and 2.2.x allows remote attackers to execute arbitrary com…CVE-2011-0647Emc · 64% likely

   CWE-20Emc

7. Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to execute arbitrary code via a long PlayFi…CVE-2010-4742Moxa · 56% likely

   CWE-119Moxa

8. The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 bef…CVE-2011-0522Videolan · 52% likely

   CWE-119Videolan

9. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universa…CVE-2011-0593Adobe · 50% likely

   CWE-20Adobe

10. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universa…CVE-2011-0592Adobe · 48% likely

    CWE-20Adobe

11. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universa…CVE-2011-0591Adobe · 48% likely

    CWE-20Adobe

12. Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoi…CVE-2011-0978Microsoft · 43% likely

    CWE-119Microsoft

13. demux/mkv/mkv.hpp in the MKV demuxer plugin in VideoLAN VLC media player 1.1.6.1 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary com…CVE-2011-0531Videolan · 42% likely

    CWE-20Videolan

14. Stack-based buffer overflow in WTclient.dll in SCADA Engine BACnet OPC Client before 1.0.25 allows user-assisted remote attackers to execute arbitrary code via a crafted .csv file…CVE-2010-4740Scadaengine · 42% likely

    CWE-119

15. AcroRd32.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cau…CVE-2011-0567Adobe · 40% likely

    CWE-119Adobe

16. The U3D component in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code v…CVE-2011-0600Adobe · 40% likely

    CWE-20Adobe

17. Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote a…CVE-2011-0977Microsoft · 32% likely

    CWE-399Microsoft

18. avahi-core/socket.c in avahi-daemon in Avahi before 0.6.29 allows remote attackers to cause a denial of service (infinite loop) via an empty mDNS (1) IPv4 or (2) IPv6 UDP packet t…CVE-2011-1002Avahi · 29% likely

    CWE-835Avahi

19. Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execute arbitrary code via crafted data in a…CVE-2010-4741Moxa · 28% likely

    CWE-119Moxa

20. Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle er…CVE-2011-0979Microsoft · 27% likely

    CWE-20Microsoft

21. Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attac…CVE-2011-0980Microsoft · 26% likely

    CWE-264Microsoft

22. Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPo…CVE-2011-0976Microsoft · 25% likely

    CWE-264Microsoft

23. The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file w…CVE-2011-0092Microsoft · 24% likely

    CWE-94Microsoft

24. The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlie…CVE-2010-4476Sun · 23% likely

    Sun Microsystems

25. The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to…CVE-2011-0040Microsoft · 23% likely

    CWE-20Microsoft

26. Multiple cross-site scripting (XSS) vulnerabilities in EmployeeSearch.cc in the Employee Search Engine in ZOHO ManageEngine ADSelfService Plus before 4.5 Build 4500 allow remote a…CVE-2010-3274Zohocorp · 21% likely

    CWE-79Zoho (ManageEngine)

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.