Likely to be exploited (10% or more)

Every one of the 42 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a memory-management bug, it is vulnerable to a Denial of Service attack (against all clients using the pr…CVE-2021-31806Squid-Cache · 95% likely

   CWE-116Squid-Cache

2. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required t…CVE-2021-31474SolarWinds · CVSS 9.8 · 94% likely

   CWE-502SolarWinds

3. Squid before 4.15 and 5.x before 5.0.6 allows remote servers to cause a denial of service (affecting availability to all clients) via an HTTP response. The issue trigger is a head…CVE-2021-33620Squid-Cache · CVSS 6.5 · 80% likely

   CWE-20Squid-Cache

4. Jenkins Dashboard View Plugin 2.15 and earlier does not escape URLs referenced in Image Dashboard Portlets, resulting in a stored cross-site scripting (XSS) vulnerability exploita…CVE-2021-21649Jenkins project · 73% likely

   CWE-79Jenkins

5. An issue was discovered in Squid 4.x before 4.15 and 5.x before 5.0.6. If a remote server sends a certain response header over HTTP or HTTPS, there is a denial of service. This he…CVE-2021-28662Squid-Cache · 72% likely

   CWE-116Squid-Cache

6. A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code a…CVE-2021-22908Ivanti · 69% likely

   CWE-120Ivanti

7. Jenkins URLTrigger Plugin 0.48 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.CVE-2021-21659Jenkins project · 67% likely

   Jenkins

8. Bypass of path matching rules using escaped slash charactersCVE-2021-29492envoyproxy · CVSS 8.1 · 63% likely

   CWE-22Envoyproxy

9. Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mis…CVE-2020-28019Exim · 62% likely

   CWE-665Exim

10. Apache Dubbo RCE on customers via Script route poisoning (Nashorn script injection)CVE-2021-30181Apache Software Foundation · 61% likely

    Apache

11. Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)CVE-2021-30180Apache Software Foundation · 60% likely

    CWE-444Apache

12. Exim 4 before 4.94.2 allows Use After Free in smtp_reset in certain situations that may be common for builds with OpenSSL.CVE-2020-28018Exim · 56% likely

    CWE-416Exim

13. Visual Studio Remote Code Execution VulnerabilityCVE-2021-27068Microsoft · CVSS 8.8 · 54% likely

    Microsoft

14. All in One SEO Pack < 4.1.0.2 - Admin RCE via unserializeCVE-2021-24307All in One SEO Team · 53% likely

    CWE-502

15. Authentication with JWT allows use of “none”-algorithmCVE-2021-22160Apache Software Foundation · 53% likely

    CWE-347Apache

16. Visual Studio Code Remote Containers Extension Remote Code Execution VulnerabilityCVE-2021-31213Microsoft · CVSS 7.8 · 53% likely

    Microsoft

17. Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-28474Microsoft · CVSS 8.8 · 51% likely

    CWE-436Microsoft

18. Windows Hyper-V Remote Code Execution VulnerabilityCVE-2021-28476Microsoft · CVSS 9.9 · 39% likely

    Microsoft

19. Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow in receive_add_recipient via an e-mail message with fifty million recipients. NOTE: remote exploitation may be diff…CVE-2020-28017Exim · 37% likely

    CWE-190Exim

20. An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/Boards/Partials/_ForumPost.cshtml does not call HtmlUtils.SanitizeHtml on certain text for a forum p…CVE-2021-32608Smartstore · 33% likely

    Smartstore

21. An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Views/PrivateMessages/View.cshtml does not call HtmlUtils.SanitizeHtml on a private message.CVE-2021-32607Smartstore · 33% likely

    Smartstore

22. Cisco Modeling Labs Web UI Command Injection VulnerabilityCVE-2021-1531Cisco · CVSS 8.8 · 30% likely

    CWE-88Cisco

23. Microsoft SharePoint Remote Code Execution VulnerabilityCVE-2021-31181Microsoft · CVSS 8.8 · 29% likely

    CWE-94Microsoft

24. Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination.CVE-2020-28905Nagios · 26% likely

    CWE-94Nagios

25. Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter.CVE-2021-30214Eng · 24% likely

    CWE-74Eng

26. Scripting Engine Memory Corruption VulnerabilityCVE-2021-26419Microsoft · CVSS 7.5 · 23% likely

    CWE-787Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.