Likely to be exploited (10% or more)

Every one of the 58 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to execute arbitrary Java code by using (1) fileU…CVE-2016-1524Netgear · 94% likely

   NETGEAR

2. Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote atta…CVE-2015-7547Gnu · 92% likely

   CWE-119GNU

3. The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which…CVE-2016-0701Openssl · 84% likely

   CWE-200OpenSSL1 bounty report

4. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Interne…CVE-2016-0041Microsoft · 83% likely

   Microsoft

5. The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafte…CVE-2016-0742F5 · 82% likely

   CWE-476F5

6. Directory traversal vulnerability in data/config/image.do in NETGEAR Management System NMS300 1.5.0.11 and earlier allows remote authenticated users to read arbitrary files via a…CVE-2016-1525Netgear · 75% likely

   CWE-22NETGEAR

7. Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5),…CVE-2016-1287Cisco · 74% likely

   CWE-119Cisco

8. The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspeci…CVE-2016-0956Apache · 51% likely

   CWE-200Apache

9. Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2016-0063Microsoft · 39% likely

   CWE-119Microsoft

10. Heap-based buffer overflow in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.…CVE-2016-0971Adobe · 33% likely

    CWE-787Adobe

11. The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause…CVE-2016-0801Google · 33% likely

    CWE-20Google

12. Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemo…CVE-2016-2569Squid-Cache · 31% likely

    CWE-20Squid-Cache

13. Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.…CVE-2016-0974Adobe · 31% likely

    CWE-416Adobe

14. Multiple buffer overflows in (1) lmgrd and (2) Vendor Daemon in Flexera FlexNet Publisher before 11.13.1.2 Security Update 1 allow remote attackers to execute arbitrary code via a…CVE-2015-8277Flexerasoftware · 29% likely

    CWE-119Flexerasoftware

15. Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…CVE-2016-0060Microsoft · 27% likely

    CWE-119Microsoft

16. Windows Reader in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted Reader file, aka "Microsof…CVE-2016-0046Microsoft · 26% likely

    CWE-20Microsoft

17. Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 on Linux, Adobe AIR before 20.0.0.260, Adobe AIR SDK before 20…CVE-2016-0985Adobe · 26% likely

    CWE-843Adobe

18. The forms-based authentication implementation in Active Directory Federation Services (ADFS) 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of s…CVE-2016-0037Microsoft · 26% likely

    CWE-20Microsoft

19. The Hyperlink Object Library in Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory via a crafted URL in a (1) e-m…CVE-2016-0059Microsoft · 23% likely

    CWE-200Microsoft

20. The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 G…CVE-2016-0051Microsoft · 23% likely

    CWE-264MicrosoftWhitefly

21. Buffer overflow in the PDF Library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote attackers to execute arbitrary code via a crafted PDF do…CVE-2016-0058Microsoft · 23% likely

    CWE-119Microsoft

22. Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Mi…CVE-2016-0062Microsoft · 21% likely

    CWE-119Microsoft

23. Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web sit…CVE-2016-0061Microsoft · 21% likely

    CWE-119Microsoft

24. WinForms in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to obtain sensitive information from process memory via crafted icon data,…CVE-2016-0047Microsoft · 20% likely

    CWE-200Microsoft

25. Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 allow…CVE-2016-0038Microsoft · 20% likely

    CWE-119Microsoft

26. Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet E…CVE-2016-0072Microsoft · 20% likely

    CWE-119Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.