Possible (1 to 10%)

Every one of the 828 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to processing of atoms in MP4 files. Successful exploitation could l…CVE-2017-2926Adobe · 9.9% likely

   CWE-787Adobe

2. The duration function in the moment package before 2.11.2 for Node.js allows remote attackers to cause a denial of service (CPU consumption) via a long string, aka a "regular expr…CVE-2016-4055Momentjs · 9.9% likely

   CWE-400

3. NTP before 4.2.8p6 and 4.3.0 before 4.3.90 allows a remote attackers to cause a denial of service (stack exhaustion) via an ntpdc relist command, which triggers recursive traversa…CVE-2015-7978Ntp · 9.9% likely

   CWE-400Ntp

4. Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable type confusion vulnerability in the XSLT engine related t…CVE-2017-2962Adobe · 9.9% likely

   CWE-704Adobe

5. NTP before 4.2.8p9 does not properly perform the initial sync calculations, which allows remote attackers to unspecified impact via unknown vectors, related to a "root distance th…CVE-2016-7433Ntp · 9.8% likely

   CWE-682Ntp

6. Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable use after free vulnerability in the JavaScript engine. Su…CVE-2017-2958Adobe · 9.7% likely

   CWE-416Adobe

7. Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earlier, and AntiVirus Pro 10.1.0.316 and earlier on OS X allows…CVE-2017-5005Quickheal · 9.7% likely

   CWE-787Quickheal

8. Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.CVE-2016-2087Hexchat Project · 9.5% likely

   CWE-22

9. Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable heap overflow vulnerability in the JPEG decoder routine.…CVE-2017-2971Adobe · 9.1% likely

   CWE-119Adobe

10. An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. I…CVE-2016-10043Mrf · 9.0% likely

    CWE-78

11. An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.CVE-2016-10182Dlink · 9.0% likely

    CWE-77D-Link

12. NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service (ntpd abort) by using the same IP address multiple times in…CVE-2016-2516Ntp · 8.9% likely

    CWE-20Ntp

13. NTP before 4.2.8p9 allows remote attackers to bypass the origin timestamp protection mechanism via an origin timestamp of zero. NOTE: this vulnerability exists because of a CVE-20…CVE-2016-7431Ntp · 8.9% likely

    CWE-20Ntp

14. Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing Adobe Texture Format files. Successful exploitation could lead t…CVE-2017-2927Adobe · 8.9% likely

    CWE-787Adobe

15. Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary…CVE-2016-9635Gstreamer · 8.8% likely

    CWE-119Gstreamer

16. Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary…CVE-2016-9634Gstreamer · 8.8% likely

    CWE-119Gstreamer

17. NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent authentication) by leveraging knowledge of the controlkey or re…CVE-2016-2517Ntp · 8.8% likely

    CWE-20Ntp

18. Heap-based buffer overflow in the flx_decode_delta_fli function in gst/flx/gstflxdec.c in the FLIC decoder in GStreamer before 1.10.2 allows remote attackers to execute arbitrary…CVE-2016-9636Gstreamer · 8.3% likely

    CWE-119Gstreamer

19. ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute ar…CVE-2016-6266Trendmicro · 8.2% likely

    CWE-20Trend Micro

20. The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted fil…CVE-2016-9813Gstreamer · 7.9% likely

    CWE-476Gstreamer

21. Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have an exploitable buffer overflow / underflow vulnerability in the image co…CVE-2017-2952Adobe · 7.8% likely

    CWE-119Adobe

22. The exif_convert_any_to_int function in ext/exif/exif.c in PHP before 5.6.30, 7.0.x before 7.0.15, and 7.1.x before 7.1.1 allows remote attackers to cause a denial of service (app…CVE-2016-10158Php · 7.8% likely

    CWE-189PHP

23. Barco ClickShare CSC-1 devices with firmware before 01.09.03 and CSM-1 devices with firmware before 01.06.02 allow remote attackers to execute arbitrary code via unspecified vecto…CVE-2016-3149Barco · 7.7% likely

    Barco

24. An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-b…CVE-2016-9054Aerospike · CVSS 9.8 · 7.7% likely

    CWE-787Aerospike

25. An exploitable stack-based buffer overflow vulnerability exists in the querying functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause a stack-b…CVE-2016-9052Aerospike · CVSS 9.8 · 7.7% likely

    CWE-787Aerospike

26. Integer overflow in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory c…CVE-2016-10159Php · 7.6% likely

    CWE-190PHP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.