Likely to be exploited (10% or more)

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

1. sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows rem…CVE-2016-6210Openbsd · CVSS 5.9 · 89% likelycovered by CyberSIXT

   CWE-200Openbsd1 bounty report1 article

2. gdi32.dll in Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windo…CVE-2017-0038Microsoft Corporation · 82% likely

   CWE-200Microsoft

3. A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote atta…CVE-2016-9244F5 Networks · 74% likely

   CWE-200F5

4. An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution…CVE-2017-5941Node-Serialize Project · 61% likely

   CWE-502

5. The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19…CVE-2017-6343Dahuasecurity · 60% likely

   CWE-287Dahuasecurity

6. The auth component in Dovecot before 2.2.27, when auth-policy is configured, allows a remote attackers to cause a denial of service (crash) by aborting authentication without sett…CVE-2016-8652Dovecot · 48% likely

   CWE-20Dovecot

7. Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary code via a long URI in a GET request.CVE-2017-6187Disksavvy · 33% likely

   CWE-119

8. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability when parsing an MP4 header. Successful exploitation could lead to arbitrary code…CVE-2017-2992Adobe · 33% likely

   CWE-787Adobe

9. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video (FLV) codec. Successful exploitation could lead to arbitrary…CVE-2017-2986Adobe · 31% likely

   CWE-787Adobe

10. An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the GpcContainer Class…CVE-2017-3823Cisco · 27% likely

    CWE-119Cisco

11. Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.CVE-2016-2148Busybox · 27% likely

    CWE-119Busybox

12. ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remote authenticated users to execute arbitrary commands via she…CVE-2015-6024Netcommwireless · 26% likely

    CWE-77Netcommwireless

13. OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the BeanShell (bsh)…CVE-2017-5586Opentext · 25% likely

    CWE-20OpenText

14. The TCP stack in the Linux kernel 3.x does not properly implement a SYN cookie protection mechanism for the case of a fast network connection, which allows remote attackers to cau…CVE-2017-5972Linux · 24% likely

    CWE-400Linux

15. The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabi…CVE-2016-9682Dell · 23% likely

    CWE-77Dell

16. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable use after free vulnerability in the ActionScript 3 BitmapData class. Successful exploitation could lead to a…CVE-2017-2985Adobe · 22% likely

    CWE-416Adobe

17. An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…CVE-2016-9361Moxa · CVSS 9.8 · 20% likely

    CWE-307Moxa

18. Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header.CVE-2016-6175Php-Gettext Project · 20% likely

    CWE-94

19. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary cod…CVE-2017-2984Adobe · 18% likely

    CWE-787Adobe

20. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability when performing garbage collection. Successful exploitation could lead to ar…CVE-2017-2988Adobe · 18% likely

    CWE-787Adobe

21. An issue was discovered in certain Apple products. macOS before 10.12.3 is affected. The issue involves the "Help Viewer" component, which allows XSS attacks via a crafted web sit…CVE-2017-2361Apple · 17% likely

    CWE-79Apple

22. D-Link DGS-1510-28XMP, DGS-1510-28X, DGS-1510-52X, DGS-1510-52, DGS-1510-28P, DGS-1510-28, and DGS-1510-20 Websmart devices with firmware before 1.31.B003 allow attackers to condu…CVE-2017-6206Dlink · 16% likely

    CWE-200D-Link

23. An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdf_run_xobject function in pdf-op-run.c encounters a NULL pointer dereference during…CVE-2017-5991Artifex · 15% likely

    CWE-476Artifex

24. A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software, Major Releases 9.0-9.6, could allow an authenticated, remo…CVE-2017-3807Cisco · 15% likely

    CWE-119Cisco

25. Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier a…CVE-2016-9269Trendmicro · 13% likely

    CWE-264Trend Micro

26. An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017…CVE-2017-6342Dahuasecurity · 13% likely

    CWE-269Dahuasecurity

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.