Check available, not yet exploited

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. Western Digital MyCloud NAS - Authentication BypassCVE-2018-17153Western Digital · 87% likely

   CWE-287Western Digital

2. Joomla! JCK Editor SQL InjectionCVE-2018-17254Arkextensions · 83% likely

   CWE-89

3. FUEL CMS 1.4.1 - Remote Code ExecutionCVE-2018-16763Thedaylightstudio · 83% likely

   CWE-74Thedaylightstudio

4. Zoho ManageEngine OpManager - SQL InjectionCVE-2018-17283Zohocorp · 66% likely

   CWE-89Zoho (ManageEngine)

5. WordPress Plugin Wechat Broadcast 1.2.0 - Local File InclusionCVE-2018-16283Wechat Brodcast Project · 64% likely

   CWE-22

6. Rubedo CMS <=3.4.0 - Directory TraversalCVE-2018-16836Rubedo Project · 61% likely

   CWE-22

7. WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code ExecutionCVE-2018-17207Awesomemotive · 60% likely

   CWE-94Awesomemotive

8. LG Supersign EZ CMS - Remote Code ExecutionCVE-2018-17173Lg · 57% likely

   CWE-94LG

9. WordPress Localize My Post 1.0 - Local File InclusionCVE-2018-16299Localize My Post Project · 44% likely

   CWE-22

10. LG SuperSign EZ CMS 2.5 - Local File InclusionCVE-2018-16288Lg · 36% likely

    CWE-200LG

11. WirelessHART Fieldgate SWG70 3.0 - Local File InclusionCVE-2018-16059Endress · 29% likely

    CWE-22

12. CirCarLife <4.3 - Improper AuthenticationCVE-2018-16670Circontrol · 25% likely

    CWE-287Circontrol

13. CirCarLife <4.3 - Improper AuthenticationCVE-2018-16668Circontrol · 9.5% likely

    CWE-287Circontrol

14. CirCarLife <4.3 - Improper AuthenticationCVE-2018-16671Circontrol · 8.9% likely

    CWE-200Circontrol

15. Jorani Leave Management System 0.6.5 - Cross-Site ScriptingCVE-2018-15917Jorani Project · 5.9% likely

    CWE-79Jorani

16. Apache2 - Transfer-Encoding Chunked XSSCVE-2018-17082Php · 4.1% likely

    CWE-79PHP1 bounty report

17. Sympa version =>6.2.16 - Cross-Site ScriptingCVE-2018-1000671Sympa · 3.4% likely

    CWE-601Sympa

18. Monstra CMS 3.0.4 - HTTP Header InjectionCVE-2018-16979Monstra · 3.0% likely

    CWE-113Monstra

19. Eventum <3.4.0 - Open RedirectCVE-2018-16761Eventum Project · 2.2% likely

    CWE-601Eventum Project

20. WordPress File Manager < 3.0 - Cross-Site ScriptingCVE-2018-16363Filemanagerpro · 1.4% likely

    CWE-79Filemanagerpro

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.