Exploited CVEs of 2016

Every one of the 54 is a mark on the map. Named now: 1 to 26, most at risk first.

1. NETGEAR Routers - Remote Code ExecutionCVE-2016-6277NETGEAR · CVSS 8.8 · 100% likely

   CWE-352NETGEAR

2. WordPress PHPMailer < 5.2.18 - Remote Code ExecutionCVE-2016-10033PHP · CVSS 9.8 · 100% likely

   CWE-88PHP1 bounty report

3. Apache ActiveMQ Fileserver - Arbitrary File WriteCVE-2016-3088Apache · CVSS 9.8 · 98% likely

   CWE-434Apache

4. IBM WebSphere Java Object Deserialization - Remote Code ExecutionCVE-2015-7450IBM · CVSS 9.8 · 98% likely

   CWE-502IBMFIN13

5. The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to exe…CVE-2016-3714ImageMagick · CVSS 8.4 · 97% likely

   CWE-20Imagemagick1 bounty report

6. Apache S2-032 Struts - Remote Code ExecutionCVE-2016-3081Apache · CVSS 8.1 · 97% likelycovered by CyberSIXT

   CWE-77ApacheFlax Typhoon5 articles

7. Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remot…CVE-2016-0752Rails · CVSS 7.5 · 96% likely

   CWE-22Rails2 bounty reports

8. Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.CVE-2016-4117Adobe · CVSS 7.8 · 94% likely

   AdobeAPT37

9. The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitrary code…CVE-2016-0189Microsoft · CVSS 7.5 · 94% likely

   CWE-787Microsoft

10. Apache Shiro 1.2.4 Cookie RememberME - Deserial Remote Code Execution VulnerabilityCVE-2016-4437Apache · CVSS 9.8 · 93% likely

    CWE-321Apache

11. Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and ava…CVE-2016-3427Oracle · CVSS 9.8 · 92% likely

    CWE-284Oracle

12. The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote…CVE-2016-6415Cisco · CVSS 7.5 · 88% likely

    CWE-200Cisco

13. Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modu…CVE-2016-6366Cisco · CVSS 8.8 · 88% likely

    CWE-120Cisco

14. Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature…CVE-2016-5195Linux · CVSS 7 · 84% likely

    CWE-362Linux

15. The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,…CVE-2016-7200Microsoft · CVSS 8.8 · 83% likely

    CWE-787Microsoft

16. The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10…CVE-2016-7255Microsoft · CVSS 7.8 · 81% likely

    MicrosoftOceanLotus

17. The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,…CVE-2016-7201Microsoft · CVSS 8.8 · 80% likely

    CWE-843Microsoft

18. The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted im…CVE-2016-3718ImageMagick · CVSS 5.5 · 76% likely

    CWE-918Imagemagick

19. The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.CVE-2016-3715ImageMagick · CVSS 5.5 · 75% likely

    CWE-552Imagemagick

20. SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Securit…CVE-2016-2386SAP · CVSS 9.8 · 72% likely

    CWE-89SAP

21. Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka…CVE-2016-0185Microsoft · CVSS 7.8 · 70% likely

    Microsoft

22. Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (objec…CVE-2016-0034Microsoft · CVSS 8.8 · 69% likely

    Microsoft

23. Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Window…CVE-2016-3393Microsoft · CVSS 7.8 · 68% likely

    Microsoft

24. WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.CVE-2016-4657Apple · CVSS 8.8 · 67% likely

    CWE-787Apple

25. atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8…CVE-2016-7256Microsoft · CVSS 8.8 · 65% likely

    Microsoft

26. The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mismanages process tokens, whi…CVE-2016-0151Microsoft · CVSS 7.8 · 63% likely

    CWE-269Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.