Check available, not yet exploited

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Jira Server and Data Center - Information DisclosureCVE-2020-36289Atlassian · CVSS 5.3 · 99% likely

   CWE-863Atlassian

2. Rocket.Chat <=3.13 - NoSQL InjectionCVE-2021-22911Rocket.chat · 95% likely

   CWE-75Rocket.chat1 bounty report

3. Websvn <2.6.1 - Remote Code ExecutionCVE-2021-32305Websvn · 87% likely

   CWE-78Websvn

4. Cisco HyperFlex HX Data Platform - Arbitrary File UploadCVE-2021-1499Cisco · CVSS 5.3 · 80% likely

   CWE-306Cisco

5. XStream <1.4.17 - Remote Code ExecutionCVE-2021-29505x-stream · CVSS 7.5 · 77% likely

   CWE-94Xstream

6. Microsoft Exchange Server - Cross-Site ScriptingCVE-2021-31195Microsoft · CVSS 6.5 · 74% likely

   CWE-290Microsoft

7. Ruby Dragonfly <1.4.0 - Remote Code ExecutionCVE-2021-33564Dragonfly Project · 72% likely

   CWE-88

8. Jellyfin 10.7.2 - Server Side Request ForgeryCVE-2021-29490jellyfin · CVSS 5.8 · 70% likely

   CWE-918Jellyfin

9. HPE Edgeline Infrastructure Manager <1.22 - Authentication BypassCVE-2021-29203Hp · 68% likely

   CWE-306HP

10. Nodejs Squirrelly - Remote Code ExecutionCVE-2021-32819squirrellyjs · CVSS 8 · 58% likely

    CWE-200

11. WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File UploadCVE-2021-24284SayenThemes · 42% likely

    CWE-434

12. VoipMonitor <24.61 - Remote Code ExecutionCVE-2021-30461Voipmonitor · 39% likely

    CWE-94Voipmonitor

13. Kyocera Printer d-COPIA253MF - Directory TraversalCVE-2020-23575Kyocera · 35% likely

    CWE-22Kyocera

14. CentOS Web Panel - OS Command InjectionCVE-2021-31324Control-Webpanel · 35% likely

    CWE-78Control-Webpanel

15. Hongdian H8922 3.0.5 - Remote Command InjectionCVE-2021-28151Hongdian · 28% likely

    CWE-78Hongdian

16. Prometheus - Open RedirectCVE-2021-29622prometheus · CVSS 6.5 · 20% likely

    CWE-601Prometheus

17. Popup by Supsystic <1.10.5 - Cross-Site scriptingCVE-2021-24275Supsystic · 18% likely

    CWE-79Supsystic

18. WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site ScriptingCVE-2021-24274Supsystic · 18% likely

    CWE-79Supsystic

19. WordPress Supsystic Contact Form <1.7.15 - Cross-Site ScriptingCVE-2021-24276Supsystic · 16% likely

    CWE-79Supsystic

20. Express-handlebars - Local File InclusionCVE-2021-32820express-handlebars · 16% likely

    CWE-200

21. Hongdian H8922 3.0.5 Devices - Local File InclusionCVE-2021-28149Hongdian · 15% likely

    CWE-22Hongdian

22. WordPress Car Seller - Auto Classifieds Script - SQL InjectionCVE-2021-24285Cars-Seller-Auto-Classifieds-Script Project · 15% likely

    CWE-89

23. WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site ScriptingCVE-2021-24291Photo Gallery Team · 15% likely

    CWE-79Photo Gallery Team

24. SearchBlox <9.2.2 - Local File InclusionCVE-2020-35580Searchblox · 14% likely

    CWE-22Searchblox

25. CentOS Web Panel - SQL InjectionCVE-2021-31316Control-Webpanel · 13% likely

    CWE-89Control-Webpanel

26. WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site ScriptingCVE-2021-24286Moove Agency · 13% likely

    CWE-79Mooveagency

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.