Check available, not yet exploited

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache Druid - Remote Code ExecutionCVE-2021-25646Apache Software Foundation · 99% likely

   Apache

2. Wordpress Quiz and Survey Master <7.0.1 - Arbitrary File DeletionCVE-2020-35951Expresstech · CVSS 9.9 · 76% likely

   CWE-306ExpressTech

3. Laminas Project laminas-http - Remote Code ExecutionCVE-2021-3007Zend · 75% likely

   CWE-502Zend

4. Revive Adserver <5.1.0 - Open RedirectCVE-2021-22873Revive-Adserver · 70% likely

   CWE-601Revive-Adserver1 bounty report

5. Cockpit CMS 0.6.1 - Remote Code ExecutionCVE-2020-35131Agentejo · 50% likely

   CWE-94Agentejo

6. Apache Flink 1.5.1 - Local File InclusionCVE-2020-17518Apache Software Foundation · 49% likely

   CWE-23Apache

7. OneDev < 4.0.3 - User Access Token LeakCVE-2021-21246theonedev · CVSS 8.6 · 49% likely

   CWE-862Theonedev

8. WordPress Simple Job Board <2.9.4 - Local File InclusionCVE-2020-35749Presstigers · 30% likely

   CWE-22PressTigers

9. TerraMaster TOS <.1.29 - Remote Code ExecutionCVE-2020-15568Terra-Master · 29% likely

   CWE-913Terra-Master

10. Spring Boot Actuator Logview Directory TraversalCVE-2021-21234lukashinsch · CVSS 7.7 · 21% likely

    CWE-22

11. Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication BypassCVE-2021-3297Zyxel · 21% likely

    CWE-287Zyxel

12. Node RED Dashboard <2.26.2 - Local File InclusionCVE-2021-3223Nodered · 19% likely

    CWE-22Nodered

13. PrestaShop 1.7.7.0 - SQL InjectionCVE-2021-3110Prestashop · 19% likely

    CWE-89PrestaShop

14. IPeakCMS 3.5 - SQL InjectionCVE-2021-3018Ipeak · 19% likely

    CWE-89

15. CSE Bookstore 1.0 - SQL InjectionCVE-2020-36112Cse Bookstore Project · 18% likely

    CWE-89

16. FHEM 6.0 - Local File InclusionCVE-2020-19360Fhem · 17% likely

    CWE-22

17. ffay lanproxy Directory TraversalCVE-2021-3019Lanproxy Project · 17% likely

    CWE-22

18. MERCUSYS Mercury X18G 1.0.5 Router - Local File InclusionCVE-2021-23241Mercusys · 13% likely

    CWE-22Mercusys

19. Rocket.Chat <3.9.1 - Information DisclosureCVE-2020-28208Rocket.chat · 11% likely

    CWE-203Rocket.chat

20. Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User MetaCVE-2020-36155Ultimatemember · CVSS 10 · 9.8% likely

    CWE-269Ultimatemember

21. Hue Magic 3.0.0 - Local File InclusionCVE-2021-25864Dgtl · 9.3% likely

    CWE-22

22. Acmailer - Improper Access Control to OS Command InjectionCVE-2021-20617Seeds Co.,Ltd. · 7.4% likely

    Seeds

23. OX Appsuite - Cross-Site ScriptingCVE-2020-24701Open-Xchange · 6.8% likely

    CWE-79Open-Xchange

24. Wing FTP 6.4.4 - Cross-Site ScriptingCVE-2020-27735Wftpserver · 5.8% likely

    CWE-79Wftpserver

25. Seo Panel 4.8.0 - Cross-Site ScriptingCVE-2021-3002Seopanel · 4.3% likely

    CWE-79Seopanel

26. Vtiger CRM v7.2.0 - Directory ListingCVE-2020-19363Vtiger · 3.4% likely

    CWE-200Vtiger

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.