Likely to be exploited (10% or more)

Every one of the 39 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Adobe Flash Player before 10.3.183.19 and 11.x before 11.2.202.235 on Windows, Mac OS X, and Linux; before 11.1.111.9 on Android 2.x and 3.x; and before 11.1.115.8 on Android 4.x…CVE-2012-0779Adobe · 87% likely

   Adobe

2. The TNS Listener, as used in Oracle Database 11g 11.1.0.7, 11.2.0.2, and 11.2.0.3, and 10g 10.2.0.3, 10.2.0.4, and 10.2.0.5, as used in Oracle Fusion Middleware, Enterprise Manage…CVE-2012-1675Oracle · 77% likely

   CWE-264Oracle

3. The management GUI in Symantec Web Gateway 5.0.x before 5.0.3 does not properly restrict access to application scripts, which allows remote attackers to execute arbitrary code by…CVE-2012-0297Symantec · 73% likely

   CWE-264Symantec

4. sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence…CVE-2012-2311Php · 69% likely

   CWE-89PHP

5. Atlassian JIRA before 5.0.1; Confluence before 3.5.16, 4.0 before 4.0.7, and 4.1 before 4.1.10; FishEye and Crucible before 2.5.8, 2.6 before 2.6.8, and 2.7 before 2.7.12; Bamboo…CVE-2012-2926Atlassian · 66% likely

   Atlassian

6. The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to upload arbitrary code to a designated pathname, and possibly…CVE-2012-0299Symantec · 64% likely

   CWE-264Symantec

7. Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) vi…CVE-2012-2329Php · 62% likely

   CWE-119PHP

8. Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and ava…CVE-2012-0549Oracle · 59% likely

   Oracle

9. Multiple stack-based buffer overflows in tm1admsd.exe in the Admin Server in IBM Cognos TM1 9.4.x and 9.5.x before 9.5.2 FP2 allow remote attackers to cause a denial of service (d…CVE-2012-0202Ibm · 54% likely

   CWE-119IBM

10. sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign)…CVE-2012-2336Php · 52% likely

    CWE-20PHP

11. The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain De…CVE-2012-2611Sap · 44% likely

    CWE-20SAP

12. php-wrapper.fcgi does not properly handle command-line arguments, which allows remote attackers to bypass a protection mechanism in PHP 5.3.12 and 5.4.2 and execute arbitrary code…CVE-2012-2335Php · 34% likely

    CWE-264PHP

13. Multiple stack-based buffer overflows in a certain ActiveX control in qp2.cab in IBM Lotus Quickr 8.2 before 8.2.0.27-002a for Domino allow remote attackers to execute arbitrary c…CVE-2012-2176Ibm · 32% likely

    CWE-119IBM

14. Heap-based buffer overflow in the Office GDI+ library in Microsoft Office 2003 SP3 and 2007 SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted EMF image i…CVE-2012-0167Microsoft · 31% likely

    CWE-20Microsoft

15. Stack-based buffer overflow in Lattice Semiconductor PAC-Designer 6.2.1344 allows remote attackers to execute arbitrary code via a long string in a Value tag in a SymbolicSchemati…CVE-2012-2915Lattice Semiconductor · 29% likely

    CWE-119

16. Multiple stack-based buffer overflows in Apple QuickTime before 7.7.2 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash)…CVE-2012-0663Apple · 28% likely

    CWE-119Apple

17. Integer underflow in OpenSSL before 0.9.8x, 1.0.0 before 1.0.0j, and 1.0.1 before 1.0.1c, when TLS 1.1, TLS 1.2, or DTLS is used with CBC encryption, allows remote attackers to ca…CVE-2012-2333Openssl · 28% likely

    CWE-189OpenSSL

18. Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview; Offi…CVE-2012-0159Microsoft · 27% likely

    CWE-399Microsoft

19. GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2 and Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1 does not properly validate record types in EMF images, which a…CVE-2012-0165Microsoft · 25% likely

    CWE-20Microsoft

20. Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle mem…CVE-2012-1847Microsoft · 25% likely

    CWE-264Microsoft

21. Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD…CVE-2012-0018Microsoft · 25% likely

    CWE-20Microsoft

22. Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute ar…CVE-2012-0185Microsoft · 25% likely

    CWE-264Microsoft

23. Microsoft Word 2003 SP3 and 2007 SP2 and SP3, Office 2008 and 2011 for Mac, and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a d…CVE-2012-0183Microsoft · 24% likely

    Microsoft

24. Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle mem…CVE-2012-0184Microsoft · 24% likely

    CWE-264Microsoft

25. Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5 SP1, 3.5.1, and 4 does not properly serialize input data, which allows remote attackers to execute arbitrary code…CVE-2012-0160Microsoft · 23% likely

    CWE-20Microsoft

26. Double free vulnerability in Microsoft Silverlight 4 before 4.1.10329 on Windows allows remote attackers to execute arbitrary code via vectors involving crafted XAML glyphs, aka "…CVE-2012-0176Microsoft · 22% likely

    CWE-399Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.