Exploited in the wild

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remot…CVE-2016-0752Rails · CVSS 7.5 · 96% likely

   CWE-22Rails2 bounty reports

2. SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Securit…CVE-2016-2386SAP · CVSS 9.8 · 72% likely

   CWE-89SAP

3. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.…CVE-2016-0984Adobe · CVSS 8.8 · 55% likely

   CWE-416Adobe

4. The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 22…CVE-2016-2388SAP · CVSS 5.3 · 52% likely

   CWE-200SAP

5. The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Elev…CVE-2016-0040Microsoft · CVSS 7.8 · 24% likely

   Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.