Possible (1 to 10%)

Every one of the 356 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects from untrusted sources, which al…CVE-2011-2894Vmware · 8.6% likely

   CWE-502VMware

2. Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web…CVE-2011-1897Microsoft · 8.4% likely

   CWE-79Microsoft

3. Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web…CVE-2011-1896Microsoft · 8.3% likely

   CWE-79Microsoft

4. Heap-based buffer overflow in the ecommunity_ecom2str function in bgp_ecommunity.c in bgpd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon cr…CVE-2011-3327Quagga · 7.6% likely

   CWE-119Quagga

5. Heap-based buffer overflow in the NgwiCalVTimeZoneBody::ParseSelf function in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attack…CVE-2011-0333Novell · 6.2% likely

   CWE-119Novell

6. Stack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote attackers to execute arbitrary code via a crafted PDF document that uses flate compression.CVE-2011-3332Iceni · 6.0% likely

   CWE-119Iceni

7. Unspecified vulnerability on HP NonStop Servers with software H06.x through H06.23.00 and J06.x through J06.12.00, when Samba is used, allows remote authenticated users to execute…CVE-2011-2411Samba · 6.0% likely

   Samba

8. PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter.CVE-2010-4884Hinnendahl · 5.8% likely

   CWE-94

9. Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remote attackers to execute arbitra…CVE-2011-3868Vmware · 5.8% likely

   CWE-119VMware

10. Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…CVE-2011-3252Apple · 5.6% likely

    CWE-119Apple

11. Untrusted search path vulnerability in Windows Media Center in Microsoft Windows Vista SP2 and Windows 7 Gold and SP1, and Windows Media Center TV Pack for Windows Vista, allows l…CVE-2011-2009Microsoft · 5.6% likely

    Microsoft

12. Array index error in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a crafted yearly RRULE variable in a…CVE-2011-2663Novell · 5.5% likely

    CWE-119Novell

13. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and…CVE-2011-3545Oracle · 5.4% likely

    Oracle

14. PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter.CVE-2010-4879Digitaljunkies · 5.2% likely

    CWE-94

15. Cross-site scripting (XSS) vulnerability in ocsinventory in OCS Inventory NG 2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vecto…CVE-2011-4024Ocsinventory-Ng · 5.1% likely

    CWE-79Ocsinventory-Ng

16. Buffer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with FL…CVE-2011-3249Apple · 5.1% likely

    CWE-119Apple

17. Integer overflow in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with J…CVE-2011-3250Apple · 4.8% likely

    CWE-189Apple

18. Stack-based buffer overflow in gwia.exe in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to execute arbitrary code via a long HTTP req…CVE-2011-0334Novell · 4.8% likely

    CWE-119Novell

19. Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted…CVE-2011-3219Apple · 4.8% likely

    CWE-119Apple

20. The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion fa…CVE-2011-3324Quagga · 4.7% likely

    CWE-399Quagga

21. The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State U…CVE-2011-3323Quagga · 4.7% likely

    CWE-119Quagga

22. The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertiseme…CVE-2011-3326Quagga · 4.6% likely

    CWE-399Quagga

23. ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a tru…CVE-2011-3325Quagga · 4.6% likely

    CWE-399Quagga

24. Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attacke…CVE-2011-3551Oracle · 4.5% likely

    Oracle

25. Integer signedness error in Apple QuickTime before 7.7.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted font tabl…CVE-2011-3248Apple · 4.5% likely

    CWE-189Apple

26. Multiple unspecified vulnerabilities in Check Point SSL Network Extender (SNX), SecureWorkSpace, and Endpoint Security On-Demand, as distributed by SecurePlatform, IPSO6, Connectr…CVE-2011-1827Checkpoint · 4.5% likely

    Check Point

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.