Possible (1 to 10%)

Every one of the 581 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows remote attackers to cause a denial of service (stack…CVE-2017-9872Lame Project · 9.8% likely

   CWE-119Lame Project

2. Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and W…CVE-2017-8524Microsoft Corporation · 9.8% likely

   CWE-119Microsoft

3. Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before reje…CVE-2017-9735Eclipse · 9.6% likely

   CWE-203Eclipse Foundation

4. An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strings are not properly restricted, which may allow an attacker…CVE-2017-7922Cambium Networks · 9.6% likely

   CWE-269Cambium Networks

5. A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-logic controllers 1763-L16AWA, Series A and B…CVE-2017-7901Rockwellautomation · 9.0% likely

   CWE-343Rockwell Automation

6. VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on…CVE-2017-4914VMware · 8.8% likely

   CWE-502VMware

7. Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionality. Successful exploitation could lead t…CVE-2017-3084Adobe · 8.7% likely

   CWE-416Adobe

8. Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XML class. Successful exploitation could…CVE-2017-3075Adobe · 8.7% likely

   CWE-416Adobe

9. Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects…CVE-2017-8520Microsoft Corporation · 8.6% likely

   CWE-119Microsoft

10. Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects…CVE-2017-8499Microsoft Corporation · 8.6% likely

    CWE-119Microsoft

11. The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecifi…CVE-2017-9749Gnu · 8.5% likely

    CWE-119GNU

12. The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unsp…CVE-2017-9746Gnu · 8.5% likely

    CWE-119GNU

13. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library f…CVE-2017-3092Adobe · 8.5% likely

    CWE-427Adobe

14. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library…CVE-2017-3090Adobe · 8.5% likely

    CWE-427Adobe

15. Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses o…CVE-2017-8497Microsoft Corporation · 8.3% likely

    CWE-119Microsoft

16. SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in…CVE-2017-10682Piwigo · 8.3% likely

    CWE-89Piwigo

17. Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an attack…CVE-2017-8522Microsoft Corporation · 8.2% likely

    CWE-119Microsoft

18. Microsoft browsers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows…CVE-2017-8517Microsoft Corporation · 8.2% likely

    CWE-119Microsoft

19. The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or…CVE-2017-9756Gnu · 8.1% likely

    CWE-119GNU

20. opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and applicatio…CVE-2017-9750Gnu · 8.1% likely

    CWE-119GNU

21. The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly ha…CVE-2017-9742Gnu · 8.1% likely

    CWE-119GNU

22. Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and…CVE-2017-1000367Sudo Project · 8.1% likely

    CWE-362Sudo Project

23. Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web pag…CVE-2017-2491Apple · 8.0% likely

    CWE-416Apple

24. Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.CVE-2017-10672Xml-Libxml Project · 7.9% likely

    CWE-4161 bounty report

25. An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially cr…CVE-2017-2828Foscam · CVSS 8.8 · 7.9% likely

    CWE-78Foscam

26. An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially cr…CVE-2017-2827Foscam · CVSS 8.8 · 7.9% likely

    CWE-78Foscam

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.