Possible (1 to 10%)

Every one of the 282 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universa…CVE-2011-0595Adobe · 9.9% likely

   CWE-20Adobe

2. ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in a…CVE-2011-0014Openssl · 9.9% likely

   CWE-399OpenSSL

3. Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbit…CVE-2011-0598Adobe · 9.8% likely

   CWE-189Adobe

4. Microsoft Windows Azure Software Development Kit (SDK) 1.3.x before 1.3.20121.1237, when Full IIS and a Web Role are used with an ASP.NET application, does not properly support th…CVE-2011-1068Microsoft · 9.6% likely

   CWE-20Microsoft

5. Buffer overflow in ZfHIPCND.exe in Novell ZENworks Handheld Management 7.0 allows remote attackers to execute arbitrary code via a crafted IP Conduit packet to TCP port 2400.CVE-2011-0742Novell · 9.5% likely

   CWE-119Novell

6. The Bitmap parsing component in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to e…CVE-2011-0599Adobe · 9.3% likely

   CWE-20Adobe

7. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of s…CVE-2011-0603Adobe · 8.9% likely

   CWE-119Adobe

8. The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitr…CVE-2011-0758Ca · 8.2% likely

   CWE-189Ca

9. Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arb…CVE-2010-4323Novell · 8.1% likely

   CWE-119Novell

10. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of s…CVE-2011-0566Adobe · 7.9% likely

    CWE-119Adobe

11. Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attacker…CVE-2011-0534Apache · 7.9% likely

    CWE-399Apache

12. Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.CVE-2011-0577Adobe · 7.7% likely

    Adobe

13. Wireshark 1.2.0 through 1.2.14, 1.4.0 through 1.4.3, and 1.5.0 frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attacker…CVE-2011-0538Wireshark · 7.5% likely

    CWE-119Wireshark

14. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K recor…CVE-2011-0602Adobe · 7.2% likely

    CWE-20Adobe

15. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.CVE-2011-0594Adobe · 7.2% likely

    CWE-20Adobe

16. The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to exe…CVE-2011-0596Adobe · 7.2% likely

    CWE-20Adobe

17. Stack-based buffer overflow in rt3d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to ex…CVE-2011-0606Adobe · 6.9% likely

    CWE-119Adobe

18. Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Se…CVE-2011-0975Bmc · 6.8% likely

    CWE-119Bmc

19. A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote att…CVE-2011-0926Cisco · 6.8% likely

    CWE-20Cisco

20. Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function clas…CVE-2011-0558Adobe · 6.7% likely

    CWE-189Adobe

21. RealNetworks RealPlayer 11.0 through 11.1, SP 1.0 through 1.1.5, and 14.0.0 through 14.0.1, and Enterprise 2.0 through 2.1.4, uses predictable names for temporary files, which all…CVE-2011-0694Realnetworks · 6.6% likely

    Realnetworks

22. The Java Servlet framework on Cisco TelePresence Recording Server devices with software 1.6.x before 1.6.2 and Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.…CVE-2011-0383Cisco · 6.5% likely

    CWE-287Cisco

23. Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a diffe…CVE-2011-0590Adobe · 6.4% likely

    CWE-20Adobe

24. The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie…CVE-2010-4188Adobe · 6.4% likely

    CWE-119Adobe

25. Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabilit…CVE-2011-0561Adobe · 6.3% likely

    CWE-119Adobe

26. Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabilit…CVE-2011-0560Adobe · 6.3% likely

    CWE-119Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.