Possible (1 to 10%)

Every one of the 434 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The Edge Content Security Policy feature in Microsoft Edge does not properly validate documents, which allows remote attackers to bypass intended access restrictions via a crafted…CVE-2016-3392Microsoft · 10.0% likely

   CWE-284Microsoft

2. The Tomcat init script in the tomcat7 package before 7.0.56-3+deb8u4 and tomcat8 package before 8.0.14-1+deb8u3 on Debian jessie and the tomcat6 and libtomcat6-java packages befor…CVE-2016-1240Apache · 9.8% likely

   CWE-20Apache

3. Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly exe…CVE-2016-5180C-Ares · 8.7% likely

   CWE-787C-Ares

4. Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress pluginCVE-2016-1000112Contussupport · 8.6% likely

   CWE-22

5. The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016…CVE-2016-4387Hp · 8.5% likely

   HP

6. Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous befo…CVE-2016-6939Adobe · 8.5% likely

   CWE-119Adobe

7. curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, allow remote attackers to hijack the authentication of a TLS connection b…CVE-2016-7141Haxx · 8.2% likely

   CWE-287Haxx

8. Improper handling of a repeating VRAT chunk in qcpfformat.dll allows attackers to cause a Null pointer dereference and crash in RealNetworks RealPlayer 18.1.5.705 through a crafte…CVE-2016-9018Realnetworks · 8.1% likely

   CWE-476Realnetworks

9. Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrar…CVE-2016-1453Cisco · 8.1% likely

   CWE-119Cisco

10. CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserial…CVE-2016-5019Apache · 8.0% likely

    CWE-502Apache

11. Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser In…CVE-2016-3391Microsoft · 7.9% likely

    CWE-200Microsoft

12. Heap-based buffer overflow in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous befo…CVE-2016-6994Adobe · 7.9% likely

    CWE-119Adobe

13. Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur…CVE-2016-5764Microfocus · 7.8% likely

    CWE-119Micro Focus

14. The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by trig…CVE-2016-7039Linux · 7.6% likely

    CWE-399Linux

15. Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous be…CVE-2016-6949Adobe · 7.2% likely

    CWE-416Adobe

16. Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors relat…CVE-2016-8283Oracle · 7.0% likely

    Oracle

17. The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted appli…CVE-2016-0075Microsoft · 6.9% likely

    CWE-200Microsoft

18. PHP object injection vulnerabilities exist in multiple widget files in AlienVault OSSIM and USM before 5.3.2. These vulnerabilities allow arbitrary PHP code execution via magic me…CVE-2016-8580Alienvault · 6.9% likely

    CWE-284Alienvault

19. Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors relat…CVE-2016-3492Oracle · 6.8% likely

    Oracle

20. Ruckus Wireless H500 web management interface authenticated command injectionCVE-2016-1000216Ruckus · 6.7% likely

    CWE-78RUCKUS

21. A vulnerability in the Identity Firewall feature of Cisco ASA Software before 9.6(2.1) could allow an unauthenticated, remote attacker to cause a reload of the affected system or…CVE-2016-6432Cisco · 6.7% likely

    CWE-119Cisco

22. The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to…CVE-2016-3341Microsoft · 6.6% likely

    CWE-264Microsoft

23. The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.…CVE-2016-3270Microsoft · 6.6% likely

    CWE-264Microsoft

24. Apache Struts 2 before 2.3.29 and 2.5.x before 2.5.1 allow attackers to have unspecified impact via vectors related to improper action name clean up.CVE-2016-4436Apache · 6.6% likely

    Apache

25. An exploitable remote code execution vulnerability exists in the handling of TIFF images in LibTIFF version 4.0.6. A crafted TIFF document can lead to a type confusion vulnerabili…CVE-2016-8331Libtiff · CVSS 8.1 · 6.6% likely

    Libtiff

26. Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2,…CVE-2016-5700F5 · 6.4% likely

    CWE-284F5

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.