Possible (1 to 10%)

Every one of the 462 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. (dot dot) in the type parameter. NOTE:…CVE-2012-1617Juan Ramon · 9.9% likely

   CWE-22

2. Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute arbitrary code via unknown vectors.CVE-2012-3258Hp · 9.9% likely

   HP

3. Heap-based buffer overflow in the SetDevNames method of the Tidestone Formula One ActiveX control (TTF16.ocx) 6.3.5 Build 1 in Oracle Hyperion Strategic Finance 12.x and possibly…CVE-2011-5167Oracle · 9.8% likely

   CWE-119Oracle

4. Heap-based buffer overflow in Photoshop.exe in Adobe Photoshop CS5 12.x before 12.0.5, CS5.1 12.1.x before 12.1.1, and CS6 13.x before 13.0.1 allows remote attackers to execute ar…CVE-2012-0275Adobe · 9.0% likely

   CWE-119Adobe

5. Apache CXF before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 allows remote attackers to execute unintended web-service operations by sending a header with a SOAP Action Str…CVE-2012-3451Apache · 8.9% likely

   CWE-20Apache

6. Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page…CVE-2012-1614Coppermine-Gallery · 8.7% likely

   CWE-200Coppermine-Gallery

7. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1465.CVE-2012-3263Hp · 8.6% likely

   HP

8. Unspecified vulnerability in a SOAP feature in HP SiteScope 11.10 through 11.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1464.CVE-2012-3262Hp · 8.6% likely

   HP

9. Apache Struts 2.0.0 through 2.3.4 allows remote attackers to cause a denial of service (CPU consumption) via a long parameter name, which is processed as an OGNL expression.CVE-2012-4387Apache · 8.1% likely

   CWE-264Apache

10. Directory traversal vulnerability in HServer 0.1.1 allows remote attackers to read arbitrary files via a (1) ..%5c (dot dot encoded backslash) or (2) %2e%2e%5c (encoded dot dot ba…CVE-2012-5100Luizpicanco · 7.9% likely

    CWE-22

11. The NFSv4 client implementation in IBM AIX 5.3, 6.1, and 7.1, and VIOS before 2.2.1.4-FP-25 SP-02, does not properly handle GID values, which allows remote attackers to cause a de…CVE-2012-4817Ibm · 7.6% likely

    IBM

12. Multiple integer underflows in the icmLut_allocate function in International Color Consortium (ICC) Format library (icclib), as used in Ghostscript 9.06 and Argyll Color Managemen…CVE-2012-4405Color · 7.5% likely

    CWE-189Color

13. Directory traversal vulnerability in handlers/files.xml/files.xml.php in WikkaWiki 1.3.1 and 1.3.2 allows remote attackers to read or delete arbitrary files via a non-initial .. (…CVE-2011-4450Wikkawiki · 7.5% likely

    CWE-22Wikkawiki

14. The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 for the Apache HTTP Server allows remote attackers to cause a denial of service (server or application crash) via multi…CVE-2012-3526Thomas Eibner · 7.0% likely
15. Stack-based buffer overflow in GOM Player 2.1.33.5071 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a long URI in the "ref href" tag. NOTE:…CVE-2011-5162Gomlab · 6.8% likely

    CWE-119Gomlab

16. APIFTP Server in Optimalog Optima PLC 1.5.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted packet.CVE-2012-5048Optimalog · 6.7% likely

    CWE-399

17. Mercury MR804 Router 8.0 3.8.1 Build 101220 Rel.53006nB allows remote attackers to cause a denial of service (service hang) via a crafted string in HTTP header fields such as (1)…CVE-2012-4999Mercurycom · 6.6% likely

    CWE-20Mercurycom

18. Multiple stack-based buffer overflows in KnFTP 1.0.0 allow remote attackers to execute arbitrary code via a long string to the (1) USER, (2) PASS, (3) REIN, (4) QUIT, (5) PORT, (6…CVE-2011-5166Elif Keir · 6.5% likely

    CWE-119

19. Stack-based buffer overflow in StoryBoard Quick 6 Build 3786, and possibly StoryBoard Artist and StoryBoard Studio, allows remote attackers to execute arbitrary code via a long st…CVE-2011-5172Powerproduction · 6.4% likely

    CWE-119

20. CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds write or read) via a crafted text gly…CVE-2012-3716Apple · 6.3% likely

    CWE-119Apple

21. Buffer overflow in Oreans Themida 2.1.8.0 allows remote attackers to execute arbitrary code via a crafted .TMD file.CVE-2012-4865Oreans · 6.3% likely

    CWE-119

22. The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain acce…CVE-2012-2994Cososys · 6.3% likely

    CWE-264

23. admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign admini…CVE-2012-2315Openkm · 6.2% likely

    CWE-264Openkm

24. Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted…CVE-2012-3535Uclouvain · 6.2% likely

    CWE-119Uclouvain

25. SQL injection vulnerability in the ad hoc query module in Trend Micro Control Manager (TMCM) before 5.5.0.1823 and 6.0 before 6.0.0.1449 allows remote attackers to execute arbitra…CVE-2012-2998Trend Micro · 6.1% likely

    CWE-89Trend Micro

26. Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of servic…CVE-2012-3547Freeradius · 5.7% likely

    CWE-119Freeradius

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.