Check available, not yet exploited

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Oturia WordPress Smart Google Code Inserter <3.5 - Authentication BypassCVE-2018-3810Oturia · 91% likely

   CWE-287

2. Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code ExecutionCVE-2017-8046Pivotal · 75% likely

   CWE-20Pivotal

3. Joomla! Jtag Members Directory 5.3.7 - Local File InclusionCVE-2018-6008Joomlatag · 37% likely

   CWE-200

4. Zeit Next.js < 4.2.3 - Local File InclusionCVE-2018-6184Zeit · 9.1% likely

   CWE-22Zeit

5. SugarCRM 3.5.1 - Cross-Site ScriptingCVE-2018-5715Sugarcrm · 6.9% likely

   CWE-79Sugarcrm

6. Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path TraversalCVE-2017-9965Schneider Electric SE · 4.6% likely

   CWE-22Schneider Electric

7. AvantFAX 3.3.3 - Cross-Site ScriptingCVE-2017-18024Avantfax · 4.5% likely

   CWE-791 bounty report

8. WordPress SagePay Server Gateway for WooCommerce <1.0.9 - Cross-Site ScriptingCVE-2018-5316Patsatech · 3.7% likely

   CWE-79

9. vBulletin - Open RedirectCVE-2018-6200Vbulletin · 3.5% likely

   CWE-601Vbulletin

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.