Possible (1 to 10%)

Every one of the 317 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PRRDS.exe in the Proficy Remote Data Service in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service (memory co…CVE-2012-0230Ge · 9.0% likely

   CWE-119Ge

2. Multiple stack-based buffer overflows in RobNetScanHost.exe in ABB Robot Communications Runtime before 5.14.02, as used in ABB Interlink Module, IRC5 OPC Server, PC SDK, PickMaste…CVE-2012-0245Abb · 8.1% likely

   CWE-119ABB

3. admin/index.php in PHP Grade Book before 1.9.5 BETA allows remote attackers to read the database via a SaveSQL action.CVE-2012-1670Phpgradebook · 7.7% likely

   CWE-200

4. PRLicenseMgr.exe in the Proficy Server License Manager in GE Intelligent Platforms Proficy Plant Applications 5.0 and earlier allows remote attackers to cause a denial of service…CVE-2012-0231Ge · 6.9% likely

   CWE-119Ge

5. Unspecified vulnerability in the Open URL feature in Gretech GOM Media Player before 2.1.39.5101 has unknown impact and attack vectors, a different vulnerability than CVE-2007-577…CVE-2012-1774Gomlab · 6.8% likely

   Gomlab

6. Heap-based buffer overflow in dns.cpp in InspIRCd 2.0.5 might allow remote attackers to execute arbitrary code via a crafted DNS query that uses compression.CVE-2012-1836Inspircd · 6.7% likely

   CWE-119Inspircd

7. The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference…CVE-2012-1165Openssl · 6.5% likely

   CWE-399OpenSSL

8. Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3…CVE-2012-0457Mozilla · 6.5% likely

   CWE-399Mozilla

9. The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite…CVE-2012-0292Symantec · 6.4% likely

   CWE-20Symantec

10. The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and…CVE-2012-0768Adobe · 6.3% likely

    CWE-399Adobe

11. Buffer overflow in the Cisco Port Forwarder ActiveX control in cscopf.ocx, as distributed through the Clientless VPN feature on Cisco Adaptive Security Appliances (ASA) 5500 serie…CVE-2012-0358Cisco · 6.0% likely

    CWE-119Cisco

12. An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security…CVE-2012-0772Adobe · 5.9% likely

    CWE-119Adobe

13. SQL injection vulnerability in admin/plib/api-rpc/Agent.php in Parallels Plesk Panel 7.x and 8.x before 8.6 MU#2, 9.x before 9.5 MU#11, 10.0.x before MU#13, 10.1.x before MU#22, 1…CVE-2012-1557Parallels · 5.8% likely

    CWE-89Parallels

14. The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228 on Windows, Mac OS X, and Linux; Flash Player before 10.3.183.18 and 11.x before 11.2.202…CVE-2012-0773Adobe · 5.4% likely

    CWE-787Adobe

15. WebKit, as used in Apple iOS before 5.1 and iTunes before 10.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application c…CVE-2012-0592Apple · 5.3% likely

    CWE-119Apple

16. Multiple heap-based buffer overflows in VideoLAN VLC media player before 2.0.1 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrar…CVE-2012-1776Videolan · 5.2% likely

    CWE-119Videolan

17. The kernel in Apple iOS before 5.1 does not properly handle debug system calls, which allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a craft…CVE-2012-0643Apple · 5.1% likely

    CWE-264Apple

18. wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to obtain the installation path via a crafted request.CVE-2009-5112Iwork · 5.1% likely

    CWE-200

19. Format string vulnerability in VPN in Apple iOS before 5.1 allows remote attackers to execute arbitrary code via a crafted racoon configuration file.CVE-2012-0646Apple · 5.0% likely

    CWE-134Apple

20. Double free vulnerability in libgnutls in GnuTLS before 3.0.14 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact v…CVE-2012-1663Gnu · 4.9% likely

    CWE-399GNU

21. Use-after-free vulnerability in Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the DEP and ASLR protection mechanisms, and execute arbitrary code, via uns…CVE-2012-1845Google · 4.8% likely

    CWE-416Google

22. Absolute path traversal vulnerability in Webgrind 1.0 and 1.0.2 allows remote attackers to read arbitrary files via a full pathname in the file parameter to index.php.CVE-2012-1790Webgrind Project · 4.8% likely

    CWE-22

23. The Data Archiver service in GE Intelligent Platforms Proficy Historian 4.5 and earlier allows remote attackers to cause a denial of service (memory corruption) or possibly execut…CVE-2012-0229Ge · 4.7% likely

    CWE-119Ge

24. Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathna…CVE-2012-1089Apache · 4.7% likely

    CWE-22Apache

25. Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via a crafted catalog file in an HFS disk i…CVE-2012-0642Apple · 4.6% likely

    CWE-189Apple

26. fcgid_spawn_ctl.c in the mod_fcgid module 2.3.6 for the Apache HTTP Server does not recognize the FcgidMaxProcessesPerClass directive for a virtual host, which makes it easier for…CVE-2012-1181Apache · 4.6% likely

    CWE-119Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.