Likely to be exploited (10% or more)

Every one of the 99 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary pro…CVE-2017-9769Razer · 86% likely

   Razer

2. Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oauth_token parameter.CVE-2015-2857Accellion · 84% likely

   CWE-77Accellion

3. Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.CVE-2015-7871Ntp · 82% likely

   CWE-287Ntp

4. Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.CVE-2014-5301Manageengine · 78% likely

   CWE-22Zoho (ManageEngine)

5. It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameters was not validated. A remote attacker…CVE-2017-12478Kaseya · 78% likely

   CWE-287Kaseya

6. Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windo…CVE-2017-8636Microsoft Corporation · 72% likely

   CWE-119Microsoft

7. Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windo…CVE-2017-8641Microsoft Corporation · 72% likely

   CWE-119Microsoft

8. Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engine…CVE-2017-8634Microsoft Corporation · 70% likely

   CWE-119Microsoft

9. Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way tha…CVE-2017-8671Microsoft · 69% likely

   CWE-119Microsoft

10. Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Micr…CVE-2017-8656Microsoft Corporation · 69% likely

    CWE-119Microsoft

11. Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsof…CVE-2017-8646Microsoft Corporation · 69% likely

    CWE-119Microsoft

12. Microsoft Edge in Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsof…CVE-2017-8645Microsoft Corporation · 69% likely

    CWE-119Microsoft

13. Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Mi…CVE-2017-8640Microsoft Corporation · 69% likely

    CWE-119Microsoft

14. Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Micr…CVE-2017-8670Microsoft Corporation · 69% likely

    CWE-119Microsoft

15. It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in which its authentication can be bypass…CVE-2017-12477Kaseya · 68% likely

    CWE-287Kaseya

16. Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on vulnerable installations. The specific flaw can…CVE-2017-11394Trend Micro · 67% likely

    CWE-20Trend Micro

17. Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute arbitrary code on vulnerable installation…CVE-2017-11391Trend Micro · 62% likely

    CWE-77Trend Micro

18. PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts wi…CVE-2017-7546PostgreSQL · 62% likely

    CWE-287Postgresql

19. Windows Search in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windo…CVE-2017-8620Microsoft Corporation · 57% likely

    CWE-119Microsoft

20. Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windo…CVE-2017-8635Microsoft Corporation · 56% likely

    CWE-119Microsoft

21. Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way tha…CVE-2017-8657Microsoft Corporation · 55% likely

    CWE-119Microsoft

22. An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unsp…CVE-2017-11155Synology · 47% likely

    CWE-205Synology

23. Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.CVE-2014-931210web · 45% likely

    CWE-43410Web

24. Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory traversal sequences.CVE-2017-7442Gonitro · 41% likely

    CWE-22Gonitro

25. D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated…CVE-2017-12943Dlink · 39% likely

    CWE-22D-Link

26. SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack of proper user input validation in cmdHandlerStatusMonitor.d…CVE-2017-11385Trendmicro · 38% likely

    CWE-89Trend Micro

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.