Possible (1 to 10%)

Every one of the 647 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arb…CVE-2017-2990Adobe · 9.7% likely

   CWE-787Adobe

2. Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrat…CVE-2013-7459Dlitz · 9.6% likely

   CWE-119

3. An issue was discovered in Carlo Gavazzi VMU-C EM prior to firmware Version A11_U05, and VMU-C PV prior to firmware Version A17. Sensitive information is stored in clear-text.CVE-2017-5146Carlosgavazzi · 9.3% likely

   CWE-200

4. Adobe Digital Editions versions 4.5.3 and earlier have an exploitable heap overflow vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2017-2973Adobe · 9.3% likely

   CWE-119Adobe

5. Privilege Escalation Vulnerability in com.trend.iwss.gui.servlet.updateaccountadministration in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_…CVE-2016-9315Trendmicro · 9.0% likely

   CWE-264Trend Micro

6. An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions…CVE-2016-9369Moxa · CVSS 9.8 · 9.0% likely

   CWE-306Moxa

7. An issue was discovered in Fatek Automation PLC WinProladder Version 3.11 Build 14701. A stack-based buffer overflow vulnerability exists when the software application connects to…CVE-2016-8377Fatek · 8.9% likely

   CWE-119Fatek

8. Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, and SmartPSS Software 1.16.1 2017-01-19 send cleartext passw…CVE-2017-6341Dahuasecurity · 8.9% likely

   CWE-319Dahuasecurity

9. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec (related to decompression). Successful exploitation could…CVE-2017-2991Adobe · 8.7% likely

   CWE-787Adobe

10. Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable integer overflow vulnerability related to Flash Broker COM. Successful exploitation could lead to arbitrary…CVE-2017-2987Adobe · 8.5% likely

    CWE-190Adobe

11. Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web servers to execute arbit…CVE-2016-10190Ffmpeg · 8.4% likely

    CWE-119Ffmpeg

12. An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cau…CVE-2016-9332Moxa · 8.2% likely

    CWE-399Moxa

13. GOM Player 2.3.10.5266 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted fpx file.CVE-2017-5881Gomlab · 8.2% likely

    CWE-119Gomlab

14. An issue was discovered in Advantech SUISAccess Server Version 3.0 and prior. An attacker could traverse the file system and extract files that can result in information disclosur…CVE-2016-9349Advantech · 7.9% likely

    CWE-200Advantech

15. Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, whi…CVE-2016-2147Busybox · 7.8% likely

    CWE-190Busybox

16. Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-o…CVE-2016-10164X.org · 7.6% likely

    CWE-190X.org

17. It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop. Th…CVE-2017-6056Debian · 7.6% likely

    CWE-835Debian

18. Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to execute arbi…CVE-2016-10191Ffmpeg · 7.5% likely

    CWE-119Ffmpeg

19. An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause t…CVE-2016-9053Aerospike · CVSS 9.8 · 7.2% likely

    CWE-129Aerospike

20. Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer ove…CVE-2016-2226Gnu · 7.2% likely

    CWE-119GNU

21. The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability…CVE-2016-9684Dell · 7.1% likely

    CWE-77Dell

22. An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit"…CVE-2017-2365Apple · 7.0% likely

    CWE-200Apple

23. An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. tvOS before 10.1.1 is affected. watchOS before 3.1.3 is affecte…CVE-2017-2363Apple · 7.0% likely

    CWE-200Apple

24. An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can…CVE-2016-9051Aerospike · CVSS 9.8 · 6.9% likely

    CWE-787Aerospike

25. A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remote attacker to execut…CVE-2017-3792Cisco · 6.8% likely

    CWE-20Cisco

26. An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. watchOS before 3.1.3 is affected. The issue involves the "Kernel"…CVE-2016-7644Apple · 6.8% likely

    CWE-416Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.