Check available, not yet exploited

Every one of the 31 is a mark on the map. Named now: 1 to 26, most at risk first.

1. CHIYU TCP/IP Converter - Cross-Site ScriptingCVE-2021-31250Chiyu-Tech · 80% likely

   CWE-79Chiyu-Tech

2. Eclipse Jetty ConcatServlet - Information DisclosureCVE-2021-28169The Eclipse Foundation · CVSS 5.3 · 78% likely

   CWE-200Eclipse Foundation

3. elFinder 2.1.58 - Remote Code ExecutionCVE-2021-32682Studio-42 · CVSS 9.8 · 68% likely

   CWE-918Studio-42

4. Eclipse BIRT Viewer - Remote Code ExecutionCVE-2021-34427The Eclipse Foundation · 58% likely

   CWE-20Eclipse Foundation

5. WordPress SP Project & Document Manager <4.22 - Authenticated Shell UploadCVE-2021-24347Smartypantsplugins · 54% likely

   CWE-178Smartypantsplugins

6. WordPress Fancy Product Designer <4.6.9 - Arbitrary File UploadCVE-2021-24370Radykal · 47% likely

   CWE-434Radykal

7. WordPress Statistics <13.0.8 - Blind SQL InjectionCVE-2021-24340VeronaLabs · 30% likely

   CWE-89VeronaLabs

8. Gitlab CE/EE 10.5 - Server-Side Request ForgeryCVE-2021-22214GitLab · CVSS 6.8 · 28% likely

   CWE-918GitLab

9. elFinder < 2.1.58 - Remote Code ExecutionCVE-2021-23394Std42 · CVSS 8.1 · 19% likely

   CWE-434Std42

10. CHIYU TCP/IP Converter - Carriage Return Line Feed InjectionCVE-2021-31249Chiyu-Tech · 18% likely

    CWE-74Chiyu-Tech

11. RaspAP <=2.6.5 - Remote Command InjectionCVE-2021-33357Raspap · 17% likely

    CWE-78Raspap

12. Chamilo model.ajax.php - SQL InjectionCVE-2021-34187Chamilo · 16% likely

    CWE-89Chamilo

13. WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site ScriptingCVE-2021-24320BoldThemes · 11% likely

    CWE-79BoldThemes

14. Eclipse Mojarra - Local File ReadCVE-2020-6950Eclipse · 10% likely

    CWE-22Eclipse Foundation

15. 74cms - ajax_street.php 'x' SQL InjectionCVE-2020-2220874cms · 10% likely

    CWE-8974cms

16. Accela Civic Platform <=21.1 - Cross-Site ScriptingCVE-2021-34370Accela · 10.0% likely

    CWE-79Accela

17. Accela Civic Platform <=21.1 - Cross-Site ScriptingCVE-2021-33904Accela · 10.0% likely

    CWE-79Accela

18. 74cms - ajax_officebuilding.php SQL InjectionCVE-2020-2221074cms · 8.6% likely

    CWE-8974cms

19. 74cms - ajax_common.php SQL InjectionCVE-2020-2220974cms · 8.6% likely

    CWE-8974cms

20. 74cms - ajax_street.php 'key' SQL InjectionCVE-2020-2221174cms · 7.9% likely

    CWE-8974cms

21. WordPress Mediumish Theme <=1.0.47 - Cross-Site ScriptingCVE-2021-24316WowThemes · 6.4% likely

    CWE-79

22. PHPGurukul Hospital Management System 4.0 - SQL InjectionCVE-2020-22165Phpgurukul · 6.3% likely

    CWE-89PHPGurukul

23. Alumni Management System 1.0 - SQL InjectionCVE-2020-29214Alumni Management System Project · 4.5% likely

    CWE-89Alumni Management System Project

24. WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site ScriptingCVE-2021-24335Smartdatasoft · 3.9% likely

    CWE-79SmartDataSoft

25. Drupal 7 CKEditor XSSCVE-2021-33829Ckeditor · 3.2% likely

    CWE-79Ckeditor

26. Z-Blog <=1.5.2 - Open RedirectCVE-2020-18268Zblogcn · 2.7% likely

    CWE-601Zblogcn

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.