Check available, not yet exploited

Every one of the 27 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Nagios XI 5.7.5 - Cross-Site ScriptingCVE-2021-25299Nagios · 98% likely

   CWE-79Nagios

2. FortiLogger 4.4.2.2 - Arbitrary File UploadCVE-2021-3378Fortilogger · 98% likely

   CWE-434

3. Lucee Admin - Remote Code ExecutionCVE-2021-21307lucee · CVSS 8.6 · 89% likely

   CWE-862Lucee

4. NCR Command Center Agent 16.3 - Remote Command ExecutionCVE-2021-3122Ncr · 88% likely

   CWE-78Ncr

5. Ruby on Rails - Open Redirect via Host Header InjectionCVE-2021-22881Rubyonrails · 87% likely

   CWE-601Rubyonrails

6. Monitorr 1.7.6m - Unauthenticated Remote Code ExecutionCVE-2020-28871Monitorr · 86% likely

   CWE-434Monitorr

7. ManageEngine OpManager SumPDU 12.1 - 12.5.232 - Java DeserializationCVE-2020-28653Zohocorp · 78% likely

   Zoho (ManageEngine)

8. SaltStack Salt <3002.5 - Auth BypassCVE-2021-25281Saltstack · 73% likely

   CWE-287Saltstack

9. Wavlink Multiple AP - Remote Command InjectionCVE-2020-13117Wavlink · 69% likely

   CWE-77Wavlink

10. geojson2kml - Command InjectionCVE-2020-28429Geojson2kml Project · CVSS 7.3 · 63% likely

    CWE-78

11. Appspace 6.2.4 - Server-Side Request ForgeryCVE-2021-27670Appspace · 61% likely

    CWE-918Appspace

12. Inspur ClusterEngine 4.0 - Remote Code ExecutionCVE-2020-21224Inspur · 39% likely

    CWE-88

13. MinIO Browser API - Server-Side Request ForgeryCVE-2021-21287minio · CVSS 7.7 · 21% likely

    CWE-918MinIO

14. Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)CVE-2020-29453Atlassian · 20% likely

    CWE-22Atlassian

15. Lodash Template - Server-Side Template Injection (RCE)CVE-2021-23337Lodash · CVSS 7.2 · 20% likely

    CWE-94Lodash

16. emlog 5.3.1 Path DisclosureCVE-2021-3293Emlog · 20% likely

    Emlog

17. E-Learning System 1.0 - SQL InjectionCVE-2021-3239E-Learning System Project · 19% likely

    CWE-89

18. Sercomm VD625 Smart Modems - CRLF InjectionCVE-2021-27132Sercomm · 16% likely

    CWE-74

19. b2evolution CMS <6.11.6 - Open RedirectCVE-2020-22840B2evolution · 14% likely

    CWE-601B2evolution

20. Jenzabar 9.2x-9.2.2 - Cross-Site ScriptingCVE-2021-26723Jenzabar · 13% likely

    CWE-79Jenzabar

21. FortiWeb - Cross Site ScriptingCVE-2021-22122Fortinet · 11% likely

    CWE-79Fortinet

22. SCIMono <0.0.19 - Remote Code ExecutionCVE-2021-21479SAP SE · CVSS 8.1 · 10% likely

    CWE-74SAP

23. NETGEAR - Authentication BypassCVE-2020-27866NETGEAR · CVSS 8.8 · 8.7% likely

    CWE-288NETGEAR

24. Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site ScriptingCVE-2021-26710Redwood · 7.5% likely

    CWE-79

25. PacsOne Server <7.1.1 - Cross-Site ScriptingCVE-2020-29164Rainbowfishsoftware · 6.2% likely

    CWE-79Rainbowfishsoftware

26. Triconsole Datepicker Calendar <3.77 - Cross-Site ScriptingCVE-2021-27330Triconsole · 6.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.