Likely to be exploited (10% or more)

Every one of the 61 is a mark on the map. Named now: 1 to 26, most at risk first.

1. vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOW…CVE-2014-5073Vmturbo · 76% likely
2. Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash)…CVE-2014-3512Openssl · 74% likely

   CWE-119OpenSSL

3. Directory traversal vulnerability in the Admin Center for Tivoli Storage Manager (TSM) in Rocket ServerGraph 1.2 allows remote attackers to (1) create arbitrary files via a .. (do…CVE-2014-3914Rocketsoftware · 73% likely

   CWE-22Rocketsoftware

4. Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the id parameter…CVE-2014-5350Bitdefender · 64% likely

   CWE-22Bitdefender

5. NetBIOS name services daemon (nmbd) in Samba 4.0.x before 4.0.21 and 4.1.x before 4.1.11 allows remote attackers to execute arbitrary code via unspecified vectors that modify heap…CVE-2014-3560Samba · 56% likely

   CWE-94Samba

6. Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of serv…CVE-2014-3507Openssl · 55% likely

   CWE-399OpenSSL

7. d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory con…CVE-2014-3506Openssl · 46% likely

   CWE-399OpenSSL

8. Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a…CVE-2014-3505Openssl · 46% likely

   OpenSSL

9. Microsoft OneNote 2007 SP3 allows remote attackers to execute arbitrary code via a crafted OneNote file that triggers creation of an executable file in a startup folder, aka "OneN…CVE-2014-2815Microsoft · 44% likely

   Microsoft

10. Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 reques…CVE-2014-5160Hp · 35% likely

    CWE-22HP

11. Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated us…CVE-2014-4061Microsoft · 26% likely

    CWE-399Microsoft

12. The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, whic…CVE-2014-5266Wordpress · 25% likely

    CWE-399WordPress

13. The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure t…CVE-2014-3508Openssl · 25% likely

    CWE-200OpenSSL

14. Use-after-free vulnerability in MCPlayer.dll in Microsoft Windows Media Center TV Pack for Windows Vista, Windows 7 SP1, and Windows Media Center for Windows 8 and 8.1 allows remo…CVE-2014-4060Microsoft · 23% likely

    CWE-416Microsoft

15. Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2014-4063Microsoft · 23% likely

    CWE-119Microsoft

16. SQL injection vulnerability in AlienVault OSSIM before 4.7.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.CVE-2014-5383Alienvault · 21% likely

    CWE-89Alienvault

17. Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remot…CVE-2014-3587Php · 20% likely

    CWE-189PHP

18. The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial…CVE-2014-3510Openssl · 18% likely

    OpenSSL

19. The WordPress Mobile Pack plugin before 2.0.2 for WordPress does not properly restrict access to password protected posts, which allows remote attackers to obtain sensitive inform…CVE-2014-5337Wordpress Mobile Pack Project · 17% likely

    CWE-264

20. Off-by-one error in the __gconv_translit_find function in gconv_trans.c in GNU C Library (aka glibc) allows context-dependent attackers to cause a denial of service (crash) or exe…CVE-2014-5119Gnu · 17% likely

    CWE-189GNU

21. gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite…CVE-2014-5120Php · 17% likely

    CWE-20PHP

22. Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Expl…CVE-2014-4067Microsoft · 17% likely

    CWE-119Microsoft

23. Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2014-4058Microsoft · 17% likely

    CWE-119Microsoft

24. Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2014-4056Microsoft · 17% likely

    CWE-119Microsoft

25. Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Expl…CVE-2014-4055Microsoft · 17% likely

    CWE-119Microsoft

26. Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explo…CVE-2014-4052Microsoft · 17% likely

    CWE-119Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.