Misconfiguration and Insecure Design

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which m…CVE-2008-3115Sun · 7.0% likely

   CWE-16

2. LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlie…CVE-2009-1093Sun · 3.4% likely

   CWE-16

3. The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack.CVE-2008-2121Sun · 2.6% likely

   CWE-16

4. Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting,…CVE-2009-4442Sun · 2.5% likely

   CWE-16

5. The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal…CVE-2004-2763Sun · 2.2% likely

   CWE-16

6. The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent…CVE-2009-1104Sun · 2.2% likely

   CWE-16

7. Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a crafted SCTP packet.CVE-2008-2089Sun · 2.0% likely

   CWE-16

8. The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer…CVE-2005-4845Sun · 1.7% likely

   CWE-16

9. Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding attack and execute arbitrary JavaScript in…CVE-2007-5375Sun · 1.4% likely

   CWE-16

10. The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active…CVE-2010-0559Sun · 1.1% likely

    CWE-16

11. The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active…CVE-2010-0558Sun · 1.1% likely

    CWE-16

12. Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root,…CVE-2007-6505Sun · 0.8% likely

    CWE-16

13. Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris 10, when configured for auditing of networking (nt) events, allows local users to…CVE-2007-5422Sun · 0.4% likely

    CWE-16

14. XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which ar…CVE-2009-3746Sun · 0.3% likely

    CWE-16

15. Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (applic…CVE-2008-1778Sun · 0.3% likely

    CWE-16

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.