Exploited CVEs of 2017

Every one of the 89 is a mark on the map. Named now: 1 to 26, most at risk first.

1. PHPUnit - Remote Code ExecutionCVE-2017-9841PHPUnit · CVSS 9.8 · 100% likely

   CWE-94PHPUnit1 bounty report

2. Apache Struts 2 - Remote Command ExecutionCVE-2017-5638Apache Software Foundation · CVSS 9.8 · 100% likelycovered by CyberSIXT

   CWE-755Apache3 bounty reports1 article

3. Hikvision - Authentication BypassCVE-2017-7921Hikvision · CVSS 9.8 · 100% likelycovered by CyberSIXT

   CWE-287Hikvision1 article

4. Oracle WebLogic Server - Remote Command ExecutionCVE-2017-10271Oracle Corporation · CVSS 7.5 · 100% likelycovered by CyberSIXT

   CWE-306OracleRocke2 bounty reports

5. Apache Tomcat - Remote Code ExecutionCVE-2017-12617Apache Software Foundation · CVSS 8.1 · 100% likely

   CWE-434Apache

6. Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code…CVE-2017-11882Microsoft Corporation · CVSS 7.8 · 100% likely

   CWE-119MicrosoftAPT41Bitter

7. Windows Server 2003 & IIS 6.0 - Remote Code ExecutionCVE-2017-7269Microsoft · CVSS 9.8 · 100% likely

   CWE-120MicrosoftBlackTech

8. Apache Tomcat Servers - Remote Code ExecutionCVE-2017-12615Apache Software Foundation · CVSS 8.1 · 100% likely

   CWE-434Apache

9. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0147Microsoft Corporation · CVSS 7.5 · 100% likely

   Microsoft

10. Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Window…CVE-2017-0199Microsoft Corporation · CVSS 7.8 · 99% likely

    MicrosoftAPT37APT41

11. Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a wri…CVE-2017-7494Samba · CVSS 9.8 · 99% likely

    CWE-94Samba

12. Apache Struts2 S2-052 - Remote Code ExecutionCVE-2017-9805Apache Software Foundation · CVSS 8.1 · 99% likely

    CWE-502Apache

13. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0148Microsoft Corporation · CVSS 8.1 · 99% likely

    CWE-20Microsoft

14. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0144Microsoft Corporation · CVSS 8.8 · 99% likelycovered by CyberSIXT

    Microsoft

15. Cisco IOS 12.2(55)SE11 - Remote Code ExecutionCVE-2017-3881Cisco · CVSS 9.8 · 99% likely

    CWE-20Cisco

16. Apache Struts2 S2-053 - Remote Code ExecutionCVE-2017-9791Apache Software Foundation · CVSS 9.8 · 99% likely

    CWE-20Apache

17. Palo Alto Network PAN-OS - Remote Code ExecutionCVE-2017-15944Palo Alto Networks · CVSS 9.8 · 98% likely

    CWE-119Palo Alto Networks

18. NETGEAR WNAP320 Access Point Firmware - Remote Command InjectionCVE-2016-1555NETGEAR · CVSS 9.8 · 98% likely

    CWE-77NETGEAR

19. Embedthis GoAhead <3.6.5 - Remote Code ExecutionCVE-2017-17562Embedthis · CVSS 8.1 · 97% likely

    Embedthis

20. Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafted .eps do…CVE-2017-8291Artifex · CVSS 7.8 · 97% likely

    CWE-843Artifex1 bounty report

21. Oracle Fusion Middleware Weblogic Server - Remote OS Command ExecutionCVE-2017-3506Oracle Corporation · CVSS 7.4 · 96% likely

    CWE-78Oracle1 bounty report

22. SAP NetWeaver Application Server Java 7.5 - Local File InclusionCVE-2017-12637SAP · CVSS 7.5 · 95% likely

    CWE-22SAP

23. DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code ExecutionCVE-2017-9822DotNetNuke · CVSS 8.8 · 95% likely

    CWE-94Dotnetnuke1 bounty report

24. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Go…CVE-2017-0143Microsoft Corporation · CVSS 8.8 · 93% likely

    Microsoft

25. Intel Active Management - Authentication BypassCVE-2017-5689Intel Corporation · CVSS 9.8 · 92% likely

    CWE-269Intel

26. Jboss Application Server - Remote Code ExecutionCVE-2017-12149Red Hat, Inc. · CVSS 9.8 · 91% likely

    CWE-502Red Hat

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.