Possible (1 to 10%)

Every one of the 278 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow r…CVE-2011-4914Linux · 8.7% likely

   CWE-20Linux

2. Unrestricted file upload vulnerability in html/Upload.php in the FCChat Widget plugin 2.2.13.1 and earlier for WordPress allows remote attackers to execute arbitrary code by uploa…CVE-2012-3578Wordpress · 8.3% likely

   CWE-264WordPress

3. Stack-based buffer overflow in the _canonicalize function in common/uloc.c in International Components for Unicode (ICU) before 49.1 allows remote attackers to execute arbitrary c…CVE-2011-4599Icu-Project · 7.9% likely

   CWE-119Icu-Project

4. WinRadius Server 2009 allows remote attackers to cause a denial of service (crash) via a long password in an Access-Request packet.CVE-2012-3816Winradius · 7.7% likely
5. Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a de…CVE-2011-3193Qt · 7.2% likely

   CWE-787Qt

6. Buffer overflow in the TIFF reader in gui/image/qtiffhandler.cpp in Qt 4.7.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via t…CVE-2011-3194Qt · 6.9% likely

   CWE-119Qt

7. Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9.4 allow remote attackers to execute arbitrary code via a crafted tile size in a TIFF file, which is not properly handl…CVE-2012-1173Libtiff · 6.8% likely

   CWE-189Libtiff

8. Use-after-free vulnerability in Dropbear SSH Server 0.52 through 2012.54, when command restriction and public key authentication are enabled, allows remote authenticated users to…CVE-2012-0920Dropbear Ssh Project · 6.4% likely

   CWE-399Dropbear Ssh Project

9. Multiple buffer overflows in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute…CVE-2012-2091Flightgear · 6.4% likely

   CWE-119Flightgear

10. Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 9 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences…CVE-2012-1872Microsoft · CVSS 6.1 · 6.4% likely

    CWE-79Microsoft

11. Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial o…CVE-2012-2944Networkupstools · 6.2% likely

    CWE-119

12. Multiple format string vulnerabilities in FlightGear 2.6 and earlier and SimGear 2.6 and earlier allow user-assisted remote attackers to cause a denial of service and possibly exe…CVE-2012-2090Flightgear · 5.9% likely

    CWE-134Flightgear

13. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, 1.4.2_37 and…CVE-2012-1713Oracle · 5.9% likely

    Oracle

14. Stack-based buffer overflow in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux…CVE-2012-2035Adobe · 5.8% likely

    CWE-787Adobe

15. Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings…CVE-2012-1250Logitech · 5.8% likely

    CWE-264Logitech

16. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.CVE-2012-0212Devscripts Devel Team · 5.8% likely

    CWE-20Devscripts Devel Team

17. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level director…CVE-2012-0211Devscripts Devel Team · 5.8% likely

    CWE-20Devscripts Devel Team

18. Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) pa…CVE-2012-2395Michael Dehaan · 5.7% likely

    Michael Dehaan

19. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows rem…CVE-2012-1725Oracle · 5.6% likely

    Oracle

20. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, and 5 update 35 and earlier allows rem…CVE-2012-1716Oracle · 5.5% likely

    Oracle

21. HP System Management Homepage (SMH) before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain acce…CVE-2012-2012Hp · 5.3% likely

    HP

22. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect…CVE-2012-1722Oracle · 5.3% likely

    Oracle

23. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, and 6 update 32 and earlier, allows remote attackers to affect…CVE-2012-1721Oracle · 5.3% likely

    Oracle

24. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1)…CVE-2012-0210Devscripts Devel Team · 5.2% likely

    CWE-20Devscripts Devel Team

25. Opera before 11.64 does not properly allocate memory for URL strings, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and a…CVE-2012-3561Opera · 5.2% likely

    CWE-119Opera

26. SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Series devices allows remote auth…CVE-2012-2171Ibm · 5.1% likely

    CWE-89IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.