Possible (1 to 10%)

Every one of the 427 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold…CVE-2012-1870Microsoft · 9.8% likely

   CWE-200Microsoft

2. query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and child process c…CVE-2012-2978Nlnetlabs · 9.2% likely

   CWE-119NLnet Labs

3. Multiple heap-based buffer overflows in XnView before 1.99 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a (1) SG…CVE-2012-0276Xnview · 8.3% likely

   CWE-119Xnview

4. Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PCT ima…CVE-2012-0277Xnview · 8.0% likely

   CWE-119Xnview

5. Multiple heap-based buffer overflows in the j2k_read_sot function in j2k.c in OpenJPEG 1.5 allow remote attackers to cause a denial of service (application crash) and possibly exe…CVE-2012-3358Uclouvain · 7.7% likely

   CWE-119Uclouvain

6. Heap-based buffer overflow in jpeg_ls.dll in the Jpeg_LS (aka JLS) plugin in the formats plugins in IrfanView PlugIns before 4.34 allows remote attackers to execute arbitrary code…CVE-2012-3585Irfanview · 7.6% likely

   CWE-119Irfanview

7. Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service o…CVE-2012-2814Libexif Project · 7.6% likely

   CWE-119Libexif Project

8. Stack-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.CVE-2012-1830Wellintech · 7.6% likely

   CWE-119Wellintech

9. Heap-based buffer overflow in XnView before 1.99 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted ImageLe…CVE-2012-0282Xnview · 7.4% likely

   CWE-119Xnview

10. Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) a…CVE-2012-2088Libtiff · 6.5% likely

    CWE-189Libtiff

11. Buffer overflow in markup.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.5 allows remote attackers to execute arbitrary code via a crafted inline image in a mess…CVE-2012-3374Pidgin · 6.3% likely

    CWE-119Pidgin

12. Buffer overflow in the Player in Remote-Anything 5.60.15 allows remote attackers to execute arbitrary code via a crafted flm file.CVE-2012-4057Twd-Industries · 6.3% likely

    CWE-119

13. The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds rea…CVE-2012-2836Libexif Project · 6.3% likely

    CWE-119Libexif Project

14. nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2…CVE-2011-4963F5 · 6.0% likely

    F5

15. WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001.CVE-2012-1832Wellintech · 5.8% likely

    CWE-119Wellintech

16. Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code…CVE-2012-2841Libexif Project · 5.8% likely

    CWE-189Libexif Project

17. d4d/uploader.php in the web console in Plixer Scrutinizer (aka Dell SonicWALL Scrutinizer) before 9.5.0 allows remote attackers to create or overwrite arbitrary files in %PROGRAMF…CVE-2012-2627Sonicwall · 5.7% likely

    SonicWall

18. The crypt_des (aka DES-based crypt) function in FreeBSD before 9.0-RELEASE-p2, as used in PHP, PostgreSQL, and other products, does not process the complete cleartext password if…CVE-2012-2143Postgresql · 5.7% likely

    CWE-310Postgresql

19. The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attac…CVE-2012-0876Libexpat Project · 5.7% likely

    CWE-400Libexpat Project

20. Use-after-free vulnerability in the JSDependentString::undepend function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunder…CVE-2012-1962Mozilla · 5.6% likely

    CWE-399Mozilla

21. Multiple integer overflows in tiff2pdf in libtiff before 4.0.2 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a cra…CVE-2012-2113Libtiff · 5.5% likely

    CWE-189Libtiff

22. Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased function in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, T…CVE-2012-1951Mozilla · 5.5% likely

    CWE-399Mozilla

23. The management console in Symantec Web Gateway 5.0.x before 5.0.3.18 allows remote attackers to execute arbitrary shell commands via crafted input to application scripts, related…CVE-2012-2976Symantec · 5.4% likely

    CWE-78Symantec

24. Buffer overflow in tftp-hpa before 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the utimeout option.CVE-2011-2199H Peter Anvin · 5.2% likely

    CWE-119

25. Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial o…CVE-2012-2840Libexif Project · 5.1% likely

    CWE-189Libexif Project

26. Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a…CVE-2012-2139Rubygems · 4.9% likely

    CWE-22Rubygems

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.