Likely to be exploited (10% or more)

Every one of the 45 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a 126 /FSF/CMD request with a .. (dot dot) in a…CVE-2012-4958Novell · 74% likely

   CWE-22Novell

2. Directory traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to upload and execute files via a 130 /FSF/CMD request with a .. (dot dot)…CVE-2012-4959Novell · 71% likely

   CWE-22Novell

3. Directory traversal vulnerability in the web-based management feature on the TP-LINK TL-WR841N router with firmware 3.13.9 build 120201 Rel.54965n and earlier allows remote attack…CVE-2012-5687Tp-Link · 69% likely

   CWE-22TP-Link

4. The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers…CVE-2012-5896Quest · 69% likely

   Quest

5. Absolute path traversal vulnerability in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to read arbitrary files via a /FSF/CMD request with a full pathname in…CVE-2012-4957Novell · 68% likely

   CWE-22Novell

6. Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and other products, allows user-assi…CVE-2012-3569Vmware · 48% likely

   CWE-134VMware

7. Microsoft FTP Service 7.0 and 7.5 for Internet Information Services (IIS) processes unspecified commands before TLS is enabled for a session, which allows remote attackers to obta…CVE-2012-2532Microsoft · 42% likely

   CWE-200Microsoft

8. Heap-based buffer overflow in NFRAgent.exe in Novell File Reporter 1.0.2 allows remote attackers to execute arbitrary code via a large number of VOL elements in an SRS record.CVE-2012-4956Novell · 38% likely

   CWE-119Novell

9. Multiple buffer overflows in Apple QuickTime before 7.7.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted style ele…CVE-2012-3752Apple · 36% likely

   CWE-119Apple

10. Buffer overflow in the plugin in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MIME…CVE-2012-3753Apple · 35% likely

    CWE-119Apple

11. Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attac…CVE-2012-1885Microsoft · 29% likely

    CWE-119Microsoft

12. Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use After Free Vulnerability."CVE-2012-1539Microsoft · CVSS 8.1 · 28% likely

    CWE-416Microsoft

13. Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers…CVE-2012-2543Microsoft · 26% likely

    CWE-119Microsoft

14. Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a…CVE-2012-1887Microsoft · 25% likely

    CWE-399Microsoft

15. Sinapsi eSolar OS Command InjectionCVE-2012-5863Sinapsi · CVSS 10 · 25% likely

    CWE-78Sinapsi

16. The code-optimization feature in the reflection implementation in Microsoft .NET Framework 4 and 4.5 does not properly enforce object permissions, which allows remote attackers to…CVE-2012-4777Microsoft · 25% likely

    CWE-264Microsoft

17. The Web Proxy Auto-Discovery (WPAD) functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not validate configuration data that is returned during acquisit…CVE-2012-4776Microsoft · 25% likely

    CWE-20Microsoft

18. Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly consider trust levels during construction of output data, which allows remote attackers to obtain sensitive informatio…CVE-2012-1896Microsoft · 24% likely

    CWE-200Microsoft

19. The reflection implementation in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5.1, and 4 does not properly enforce object permissions, which allows remote attackers to ex…CVE-2012-1895Microsoft · 23% likely

    CWE-264Microsoft

20. Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreeNode Use After Free Vulnerability…CVE-2012-4775Microsoft · CVSS 8.8 · 22% likely

    CWE-399Microsoft

21. Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denia…CVE-2012-1886Microsoft · 22% likely

    CWE-119Microsoft

22. Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CFormElement Use After Free Vulnerabil…CVE-2012-1538Microsoft · 21% likely

    CWE-399Microsoft

23. Integer overflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1,…CVE-2012-1528Microsoft · 21% likely

    CWE-189Microsoft

24. Integer underflow in Windows Shell in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1…CVE-2012-1527Microsoft · 21% likely

    CWE-189Microsoft

25. The mod_proxy_ajp module in the Apache HTTP Server 2.2.12 through 2.2.21 places a worker node into an error state upon detection of a long request-processing time, which allows re…CVE-2012-4557Apache · 17% likely

    CWE-399Apache1 bounty report

26. Race condition in WebKit in Apple iOS before 6.0.1 and Safari before 6.0.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via v…CVE-2012-3748Apple · 17% likely

    CWE-362Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.