Exploited in the wild

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. SAP NetWeaver Application Server Java 7.5 - Local File InclusionCVE-2017-12637SAP · CVSS 7.5 · 95% likely

   CWE-22SAP

2. Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbit…CVE-2017-11317Telerik · CVSS 9.8 · 84% likely

   CWE-326Telerik3 bounty reports

3. Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or…CVE-2017-11357Telerik · CVSS 9.8 · 78% likely

   CWE-434Telerik

4. The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execu…CVE-2017-6327Symantec Corporation · CVSS 8.8 · 36% likely

   CWE-77Symantec

5. (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly ex…CVE-2015-2291Intel · CVSS 7.8 · 16% likely

   CWE-20IntelScattered Spider

6. A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of a…CVE-2017-6663Cisco · CVSS 6.5 · 2.1% likely

   Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.