Exploited CVEs of 2012

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

1. PHP CGI v5.3.12/5.4.2 Remote Code ExecutionCVE-2012-1823PHP · CVSS 9.8 · 100% likely

   CWE-77PHP1 bounty report

2. The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 G…CVE-2012-0158Microsoft · CVSS 8.8 · 100% likely

   CWE-94Microsoftadmin@338Aoqin Dragon

3. Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality…CVE-2012-3152Oracle · CVSS 9.1 · 99% likely

   Oracle

4. Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted ap…CVE-2012-4681Oracle · CVSS 9.8 · 99% likely

   CWE-284Oracle

5. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows r…CVE-2012-0507Oracle · CVSS 9.8 · 98% likely

   CWE-843Oracle

6. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37…CVE-2012-1723Oracle · CVSS 9.8 · 94% likely

   CWE-284Oracle

7. Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, an…CVE-2012-5076Oracle · CVSS 9.8 · 91% likely

   CWE-284Oracle

8. Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Andr…CVE-2012-0754Adobe · CVSS 7.8 · 91% likely

   CWE-787Adobe

9. The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows…CVE-2012-0151Microsoft · CVSS 7.8 · 88% likely

   CWE-20Microsoft

10. Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (m…CVE-2012-1889Microsoft · CVSS 8.8 · 84% likely

    CWE-787MicrosoftAxiom

11. Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code via a craft…CVE-2012-4969Microsoft · CVSS 8.1 · 80% likely

    CWE-416Microsoft

12. Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object…CVE-2012-4792Microsoft · CVSS 8.8 · 79% likely

    CWE-416MicrosoftAxiom

13. The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of pro…CVE-2012-0391Apache · CVSS 9.8 · 76% likely

    CWE-94Apache

14. The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Ser…CVE-2012-1856Microsoft · CVSS 8.8 · 72% likely

    MicrosoftPatchwork

15. Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or c…CVE-2012-1535Adobe · CVSS 7.8 · 70% likely

    CWE-94Adobe

16. Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execute arbitra…CVE-2012-2539Microsoft · CVSS 7.8 · 53% likely

    CWE-787Microsoft

17. Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed argume…CVE-2012-5054Adobe · CVSS 8.8 · 21% likely

    CWE-190Adobe

18. Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mi…CVE-2012-1854Microsoft · CVSS 7.8 · 21% likelycovered by CyberSIXT

    CWE-426Microsoft

19. Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, an…CVE-2012-1710Oracle · CVSS 9.8 · 7.8% likely

    Oracle

20. Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android…CVE-2012-2034Adobe · CVSS 7.5 · 7.7% likely

    CWE-119Adobe

21. Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Androi…CVE-2012-0767Adobe · CVSS 6.1 · 6.2% likely

    CWE-79Adobe

22. Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown…CVE-2012-0518Oracle · CVSS 4.7 · 4.7% likely

    CWE-601Oracle

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.