No weakness recorded: 2000

Every one of the 1,365 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Jakarta Tomcat 3.1 and 3.0 - Information DisclosureCVE-2000-0760Apache · 62% likely

   Apache

2. Microsoft FrontPage Extensions - Information DisclosureCVE-2000-0114Microsoft · 48% likely

   Microsoft

3. The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the…CVE-2000-0402Microsoft · 91% likely

   Microsoft

4. IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerabi…CVE-2000-0778Microsoft · 87% likely

   Microsoft

5. IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote attackers to read the source code of ASP…CVE-2000-0246Microsoft · 80% likely

   Microsoft

6. The web GUI for the Linux Virtual Server (LVS) software in the Red Hat Linux Piranha package has a backdoor password that allows remote attackers to execute arbitrary commands.CVE-2000-0248Redhat · 74% likely

   Red Hat

7. A DNS server allows zone transfers.CVE-1999-053269% likely
8. Buffer overflow in University of Washington imapd version 4.7 allows users with a valid account to execute commands via LIST or other commands.CVE-2000-0284University Of Washington · 68% likely

   University Of Washington

9. IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.CVE-2000-0630Microsoft · 68% likely

   Microsoft

10. A Windows NT local user or administrator account has a default, null, blank, or missing password.CVE-1999-0504Microsoft · 64% likely

    Microsoft

11. FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called b…CVE-2000-0574Openbsd · 59% likely

    Openbsd

12. IIS 4.05 and 5.0 allow remote attackers to cause a denial of service via a long, complex URL that appears to contain a large number of file extensions, aka the "Malformed Extensio…CVE-2000-0408Microsoft · 58% likely

    Microsoft

13. A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP Wrappers 7.6, (2) util-linux 2.9g, (3) wuarchive…CVE-1999-066154% likely
14. A Unix account has a default, null, blank, or missing password.CVE-1999-0502Sun · 53% likely

    Sun Microsystems

15. GAMSoft TelSrv telnet server 1.5 and earlier allows remote attackers to cause a denial of service via a long username.CVE-2000-0665Gamsoft · 51% likely
16. Buffer overflow in BEA WebLogic server proxy plugin allows remote attackers to execute arbitrary commands via a long URL with a .JSP extension.CVE-2000-0681Bea · 51% likely

    Bea

17. Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.CVE-2000-0098Microsoft · 49% likely

    Microsoft

18. The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters.CVE-2000-0505Apache · 47% likely

    Apache

19. Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP…CVE-2000-1039Microsoft · 46% likely

    Microsoft

20. Sample Internet Data Query (IDQ) scripts in IIS 3 and 4 allow remote attackers to read files via a .. (dot dot) attack.CVE-2000-0126Microsoft · 46% likely

    Microsoft

21. The showcode.asp sample file in IIS and Site Server allows remote attackers to read arbitrary files.CVE-1999-0736Microsoft · 45% likely

    Microsoft

22. The shtml.exe program in the FrontPage extensions package of IIS 4.0 and 5.0 allows remote attackers to determine the physical path of HTML, HTM, ASP, and SHTML files by requestin…CVE-2000-0413Microsoft · 44% likely

    Microsoft

23. The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.CVE-2000-0322Redhat · 42% likely

    Red Hat

24. Buffer overflow in ProFTPD, wu-ftpd, and beroftpd allows remote attackers to gain root access via a series of MKD and CWD commands that create nested directories.CVE-1999-0911Proftpd Project · 38% likely

    Proftpd

25. The WebHits ISAPI filter in Microsoft Index Server allows remote attackers to read arbitrary files, aka the "Malformed Hit-Highlighting Argument" vulnerability.CVE-2000-0097Microsoft · 36% likely

    Microsoft

26. Teardrop IP denial of service.CVE-1999-0015Microsoft · 35% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.