Possible (1 to 10%)

Every one of the 579 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily cracked, allowing a remote attacker to obtain the password for th…CVE-2018-10618Davolink · 10.0% likely

   CWE-916

2. A security vulnerability has been identified with certain HP Inkjet printers. A maliciously crafted file sent to an affected device can cause a static buffer overflow, which could…CVE-2018-5925HP Inc. · 9.7% likely

   CWE-119HP

3. An exploitable command injection vulnerability exists in the measurementBitrateExec functionality of Sony IPELA E Series Network Camera G5 firmware 1.87.00. A specially crafted GE…CVE-2018-3937Talos · CVSS 9.1 · 9.6% likely

   CWE-78Talos

4. An information disclosure vulnerability exists in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments, aka ".NET Framework Inf…CVE-2018-8360Microsoft · 9.6% likely

   CWE-200Microsoft

5. An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the…CVE-2018-15576Hazzardweb · 9.6% likely

   CWE-502

6. CNCSoft Version 1.00.83 and prior with ScreenEditor Version 1.00.54 has multiple stack-based buffer overflow vulnerabilities that could cause the software to crash due to lacking…CVE-2018-10636ICS-CERT · 9.4% likely

   CWE-121ICS-CERT

7. An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write…CVE-2018-14600X.org · 9.2% likely

   CWE-787X.org

8. IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.CVE-2018-1722IBM · CVSS 10 · 8.9% likely

   IBM

9. An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-based buffer over-read in exif_…CVE-2018-14883Php · 8.9% likely

   CWE-125PHP1 bounty report

10. mod_perl 2.0 through 2.0.10 allows attackers to execute arbitrary Perl code by placing it in a user-owned .htaccess file, because (contrary to the documentation) there is no confi…CVE-2011-2767Apache · 8.8% likely

    CWE-94Apache

11. An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerabilit…CVE-2018-8398Microsoft · 8.5% likely

    CWE-200Microsoft

12. An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerabilit…CVE-2018-8394Microsoft · 8.5% likely

    CWE-200Microsoft

13. CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HT…CVE-2018-11769Apache Software Foundation · 8.4% likely

    Apache

14. An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerabili…CVE-2018-8351Microsoft · 8.4% likely

    CWE-829Microsoft

15. An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet E…CVE-2018-8357Microsoft · 8.3% likely

    Microsoft

16. TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header.CVE-2018-15172Tp-Link · 8.2% likely

    CWE-119TP-Link

17. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker…CVE-2018-3646Intel Corporation · CVSS 5.6 · 8.1% likely

    CWE-200Intel

18. A security feature bypass vulnerability exists when Active Directory Federation Services (AD FS) improperly handles multi-factor authentication requests, aka "AD FS Security Featu…CVE-2018-8340Microsoft · 7.9% likely

    Microsoft

19. In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and `'utf-16le'…CVE-2018-12115The Node.js Project · 7.8% likely

    CWE-787Node.js

20. A Buffer Overflow exploited through web interface by remote attacker can cause remote code execution in Kraftway 24F2XG Router firmware 3.5.30.1118.CVE-2018-15353Kaspersky Lab · 7.6% likely

    CWE-119Kaspersky Lab

21. Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects versions Apache Traffic Server (ATS) 6.0.0 to 6.2.2 and 7.0.0…CVE-2018-1318Apache Software Foundation · 7.6% likely

    CWE-20Apache

22. A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is…CVE-2018-8383Microsoft · 7.6% likely

    CWE-290Microsoft

23. PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a long string beca…CVE-2017-9120Php · 7.6% likely

    CWE-190PHP

24. Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlier have an out-of-bounds write vulnerability. Successful expl…CVE-2018-12808Adobe · 7.4% likely

    CWE-787Adobe

25. A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2. To resolve this issue users running 6.2.2 should upgrade t…CVE-2018-8022Apache Software Foundation · 7.4% likely

    CWE-20Apache

26. Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote auth…CVE-2018-1156Mikrotik · 7.4% likely

    CWE-787Mikrotik

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.