Possible (1 to 10%)

Every one of the 308 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The file-management scripts in the management GUI in Symantec Web Gateway 5.0.x before 5.0.3 allow remote attackers to (1) read or (2) delete arbitrary files via unspecified vecto…CVE-2012-0298Symantec · 9.3% likely

   CWE-264Symantec

2. The IRM Server in EMC Documentum Information Rights Management 4.x before 4.7.0100 and 5.x before 5.0.1030 allows remote attackers to cause a denial of service (NULL pointer deref…CVE-2012-2276Emc · 9.0% likely

   CWE-119Emc

3. HP Business Service Management (BSM) 9.12 does not properly restrict the uploading of .war files, which allows remote attackers to execute arbitrary JSP code within the JBOSS Appl…CVE-2012-2561Hp · 8.6% likely

   CWE-264HP

4. Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly ex…CVE-2012-0804Cvs · 8.4% likely

   CWE-119Cvs

5. Multiple unspecified vulnerabilities in HP System Health Application and Command Line Utilities before 9.0.0 allow remote attackers to execute arbitrary code via unknown vectors.CVE-2012-2000Hp · 8.2% likely

   HP

6. Buffer overflow in the InitLicenKeys function in a certain ActiveX control in SkinCrafter3_vs2005.dll in SkinCrafter 3.0 allows remote attackers to execute arbitrary code via a lo…CVE-2012-2271Skincrafter · 7.7% likely

   CWE-119

7. Buffer overflow in Adobe Photoshop CS5 12.x before 12.0.5 and CS5.1 12.1.x before 12.1.1 allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2012-2028Adobe · 7.0% likely

   CWE-119Adobe

8. Unspecified vulnerability in the GlassFish Enterprise Server component in Oracle Sun Products Suite GlassFish Enterprise Server 3.1.1 allows remote attackers to affect confidentia…CVE-2012-0550Oracle · 6.9% likely

   Oracle

9. The png_set_text_2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before 1.5.10 allows remote attackers to cause a denial…CVE-2011-3048Libpng · 6.6% likely

   CWE-119Libpng

10. Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabi…CVE-2012-2029Adobe · 6.3% likely

    CWE-119Adobe

11. The file-upload implementation in rfc1867.c in PHP before 5.4.0 does not properly handle invalid [ (open square bracket) characters in name values, which makes it easier for remot…CVE-2012-1172Php · 6.2% likely

    CWE-20PHP

12. Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabi…CVE-2012-2030Adobe · 6.2% likely

    CWE-119Adobe

13. Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a craf…CVE-2012-0664Apple · 6.1% likely

    CWE-119Apple

14. Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabi…CVE-2012-2032Adobe · 5.7% likely

    CWE-119Adobe

15. The loopback plug-in in ConnMan before 0.85 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) host name or (2) domain name in a DHCP reply.CVE-2012-2321Connman · 5.6% likely

    CWE-20ConnMan

16. The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers…CVE-2011-2699Linux · 5.6% likely

    Linux

17. Buffer overflow in the trash buffer in the header capture functionality in HAProxy before 1.4.21, when global.tune.bufsize is set to a value greater than the default and header re…CVE-2012-2942Haproxy · 5.4% likely

    CWE-119Haproxy

18. Adobe Shockwave Player before 11.6.5.635 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerabi…CVE-2012-2033Adobe · 5.3% likely

    CWE-119Adobe

19. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CV…CVE-2012-2026Adobe · 5.3% likely

    CWE-119Adobe

20. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CV…CVE-2012-2025Adobe · 5.3% likely

    CWE-119Adobe

21. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CV…CVE-2012-2024Adobe · 5.3% likely

    CWE-119Adobe

22. Adobe Illustrator before CS6 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CV…CVE-2012-2023Adobe · 5.3% likely

    CWE-119Adobe

23. Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functi…CVE-2011-3620Apache · 5.3% likely

    CWE-287Apache

24. Buffer overflow in RealNetworks RealPlayer before 15.0.4.53, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via a crafted RealJukebox Media…CVE-2012-2411Realnetworks · 5.2% likely

    CWE-119Realnetworks

25. The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes…CVE-2011-3188Linux · 5.0% likely

    Linux

26. Windows Firewall in tcpip.sys in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly enforce firewall rules for outb…CVE-2012-0174Microsoft · 5.0% likely

    CWE-264Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.