Possible (1 to 10%)

Every one of the 675 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbi…CVE-2021-27413Omron · 10.0% likely

   CWE-121Omron

2. Exim 4 before 4.94.2 has Improper Neutralization of Line Delimiters, relevant in non-default configurations that enable Delivery Status Notification (DSN). Certain uses of ORCPT=…CVE-2020-28026Exim · 9.3% likely

   Exim

3. Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may a…CVE-2021-22672Deltaww · 9.0% likely

   CWE-787Deltaww

4. Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php.CVE-2020-28902Nagios · 8.4% likely

   CWE-77Nagios

5. Exim 4 before 4.92 allows Integer Overflow to Buffer Overflow, in which an unauthenticated remote attacker can execute arbitrary code by leveraging the mishandling of continuation…CVE-2020-28020Exim · 7.9% likely

   CWE-190Exim

6. Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstra…CVE-2021-33514Netgear · CVSS 8.8 · 7.9% likely

   CWE-78NETGEAR

7. EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstr…CVE-2021-33525Eyesofnetwork · 7.7% likely

   CWE-78Eyesofnetwork

8. CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.CVE-2021-30186Codesys · 7.7% likely

   CWE-787CODESYS

9. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerabi…CVE-2021-31473Foxit · CVSS 7.8 · 7.7% likely

   CWE-787Foxit

10. An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerab…CVE-2020-26147Linux · 7.6% likely

    Linux1 bounty report

11. CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.CVE-2021-30195Codesys · 7.6% likely

    CWE-125CODESYS

12. golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.CVE-2021-33194Golang · 7.5% likely

    CWE-835Golang

13. Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.CVE-2020-28908Nagios · 7.5% likely

    CWE-77Nagios

14. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to a buffer-management bug, it allows a denial of service. When resolving a request with the urn: scheme, th…CVE-2021-28651Squid-Cache · 7.4% likely

    CWE-401Squid-Cache

15. The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gain…CVE-2021-33026Flask-Caching Project · CVSS 9.8 · 7.3% likely

    CWE-5021 bounty report

16. In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access…CVE-2021-29921Python · 6.8% likely

    Python

17. Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files th…CVE-2020-28909Nagios · 6.7% likely

    CWE-732Nagios

18. An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbit…CVE-2021-31758Tenda · 6.6% likely

    CWE-787Tenda

19. An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to t…CVE-2020-26139Netbsd · 6.5% likely

    CWE-287Netbsd1 bounty report

20. This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Job Scheduler 2020.2.1 HF 2. Authentication is required to explo…CVE-2021-31475SolarWinds · CVSS 8.8 · 6.5% likely

    CWE-732SolarWinds

21. Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify file…CVE-2020-28906Nagios · 6.2% likely

    CWE-276Nagios

22. A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclientCVE-2021-25217ISC · CVSS 7.4 · 6.1% likely

    CWE-119Isc

23. The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory a…CVE-2020-24586Ieee · 5.8% likely

    IEEE1 bounty report

24. An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary ca…CVE-2020-26146Samsung · CVSS 5.3 · 5.6% likely

    CWE-20Samsung1 bounty report

25. ReDi Restaurant Reservations < 21.0426 - Unauthenticated Stored Cross-Site Scripting (XSS)CVE-2021-24299Reservation Diary · 5.5% likely

    CWE-79Reservation Diary

26. An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to an input-validation bug, it is vulnerable to a Denial of Service attack (against all clients using the pr…CVE-2021-31808Squid-Cache · 5.3% likely

    CWE-190Squid-Cache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.