Possible (1 to 10%)

Every one of the 722 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Insufficient Solution DLL Signature Validation allows potential execution of arbitrary code in HP LaserJet Enterprise printers, HP PageWide Enterprise printers, HP LaserJet Manage…CVE-2017-2750HP Inc. · 9.9% likely

   CWE-20HP

2. libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of head…CVE-2018-10000079.9% likely
3. MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.CVE-2018-57239.7% likely

   CWE-798

4. Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php.CVE-2014-16319.3% likely

   CWE-275

5. In Flexense DiskBoss Enterprise 8.5.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control…CVE-2017-156659.1% likely

   CWE-358

6. In Flexense Sync Breeze Enterprise v10.1.16, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to con…CVE-2017-156649.1% likely

   CWE-358

7. In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contr…CVE-2017-156629.1% likely

   CWE-358

8. Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allow a denial of service vuln…CVE-2018-0753Microsoft Corporation · 9.0% likely

   Microsoft

9. The server in Flexense SysGauge 3.6.18 operating on port 9221 can be exploited remotely with the attacker gaining system-level access because of a Buffer Overflow.CVE-2018-53599.0% likely

   CWE-119

10. phpFreeChat 1.7 and earlier allows remote attackers to cause a denial of service by sending a large number of connect commands.CVE-2018-59548.9% likely

    CWE-400

11. Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7 and .NET Core 1.0. 1.1 and 2.0 allow a denial of service vulnerability due to t…CVE-2018-0764Microsoft Corporation · 8.9% likely

    Microsoft

12. Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "…CVE-2018-0778Microsoft Corporation · 8.6% likely

    CWE-787Microsoft

13. Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "…CVE-2018-0773Microsoft Corporation · 8.6% likely

    CWE-787Microsoft

14. Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "…CVE-2018-0768Microsoft Corporation · 8.6% likely

    CWE-787Microsoft

15. jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnera…CVE-2012-67088.6% likely

    CWE-79

16. EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service.CVE-2017-10004718.6% likely

    CWE-476

17. VMware vRealize Automation (7.3 and 7.2) and vSphere Integrated Containers (1.x before 1.3) contain a deserialization vulnerability via Xenon. Successful exploitation of this issu…CVE-2017-4947VMware · 8.6% likely

    CWE-502VMware

18. In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as…CVE-2017-13208Google Inc. · 8.5% likely

    CWE-119Google

19. phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database ope…CVE-2017-10004998.5% likely

    CWE-352

20. Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due…CVE-2018-0766Microsoft Corporation · 8.3% likely

    CWE-200Microsoft

21. An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Applian…CVE-2017-15550EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0, EMC NetWorker Virtual Edit… · 8.2% likely

    CWE-22

22. A session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an unauthenticated attacker to hijack a…CVE-2017-11398Trend Micro · 8.2% likely

    CWE-285Trend Micro

23. WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely becaus…CVE-2017-145238.0% likely

    CWE-74

24. EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulting in denial of service.CVE-2017-10004707.9% likely

    CWE-190

25. Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u171 and 7u161; JRockit: R28.3.…CVE-2018-2657Oracle Corporation · 7.5% likely

    Oracle

26. In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload.CVE-2017-145217.3% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.