No weakness recorded: 2002

Every one of the 1,618 is a mark on the map. Named now: 1 to 26, most at risk first.

1. SquirrelMail 1.2.6/1.2.7 - Cross-Site ScriptingCVE-2002-1131Squirrelmail · 26% likely

   Squirrelmail

2. Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a…CVE-2001-0500Microsoft · 97% likely

   Microsoft

3. Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as…CVE-2001-0797Sgi · 95% likely

   Sgi

4. Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a la…CVE-2002-0656Openssl · 90% likely

   OpenSSL

5. The "sa" account is installed with a default null password on (1) Microsoft SQL Server 2000, (2) SQL Server 7.0, and (3) Data Engine (MSDE) 1.0, including third party packages tha…CVE-2000-1209Compaq · 87% likely

   Compaq

6. Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by req…CVE-2002-0568Oracle · 75% likely

   Oracle

7. wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a "~{" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).CVE-2001-0550Washington University · 74% likely

   Washington University

8. Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.CVE-2001-0236Sun · 72% likely

   Sun Microsystems

9. Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desk…CVE-2001-0540Microsoft · 71% likely

   Microsoft

10. Scripting.FileSystemObject in asp.dll for Microsoft IIS 4.0 and 5.0 allows local or remote attackers to cause a denial of service (crash) via (1) creating an ASP program that uses…CVE-2001-1243Microsoft · 71% likely

    Microsoft

11. Directory traversal vulnerability in Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to read arbitrary files and execute commands via .. (dot dot) s…CVE-2002-0661Apache · 70% likely

    Apache

12. Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the ove…CVE-2001-0506Microsoft · 69% likely

    Microsoft

13. Network Associates PGP Keyserver 7.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via exceptional BER encodings (possibly buffe…CVE-2001-1320Pgp · 68% likely

    Pgp

14. Buffer overflow in Savant Web Server 3.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.CVE-2002-1120Savant · 67% likely

    Savant

15. Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no public_html directory and when the username…CVE-2001-1013Redhat · 66% likely

    Red Hat

16. Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.CVE-2001-0779Sun · 62% likely

    Sun Microsystems

17. Apache 2.0 through 2.0.39 on Windows, OS2, and Netware allows remote attackers to determine the full pathname of the server via (1) a request for a .var file, which leaks the path…CVE-2002-0654Apache · 59% likely

    Apache

18. Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.CVE-2001-0731Apache · 57% likely

    Apache

19. Buffer overflow in gopher client for Microsoft Internet Explorer 5.1 through 6.0, Proxy Server 2.0, or ISA Server 2000 allows remote attackers to execute arbitrary code via a goph…CVE-2002-0371Microsoft · 54% likely

    Microsoft

20. Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL w…CVE-2001-1217Oracle · 54% likely

    Oracle

21. Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model and access information on the local system or in other domains, and possibly execut…CVE-2002-1254Microsoft · 54% likely

    Microsoft

22. Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.CVE-2001-0538Microsoft · 53% likely

    Microsoft

23. ISM.DLL in IIS 4.0 and 5.0 allows remote attackers to read file contents by requesting the file and appending a large number of encoded spaces (%20) and terminated with a .htr ext…CVE-2000-0457Microsoft · 53% likely

    Microsoft

24. Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or…CVE-2002-1217Microsoft · 50% likely

    Microsoft

25. Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.CVE-2001-0876Microsoft · 49% likely

    Microsoft

26. SQLQHit.asp sample file in Microsoft Index Server 2.0 allows remote attackers to obtain sensitive information such as the physical path, file attributes, or portions of source cod…CVE-2001-0986Microsoft · 48% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.