Possible (1 to 10%)

Every one of the 719 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cisco Small Business 220 Series Smart Switches VulnerabilitiesCVE-2021-1571Cisco · CVSS 7.2 · 9.7% likely

   CWE-287Cisco

2. Cisco Small Business 220 Series Smart Switches VulnerabilitiesCVE-2021-1543Cisco · CVSS 7.2 · 9.3% likely

   CWE-287Cisco

3. Scripting Engine Memory Corruption VulnerabilityCVE-2021-31959Microsoft · CVSS 6.4 · 9.2% likely

   Microsoft

4. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulne…CVE-2021-31476Foxit · CVSS 7.8 · 8.8% likely

   CWE-843Foxit

5. Cisco Small Business 220 Series Smart Switches VulnerabilitiesCVE-2021-1541Cisco · CVSS 7.2 · 8.8% likely

   CWE-287Cisco

6. portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE:…CVE-2021-34369Accela · 8.2% likely

   Accela

7. The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and execute arbitrary code on the iView (ver…CVE-2021-32930Advantech · 8.1% likely

   CWE-306Advantech

8. Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-31985Microsoft · CVSS 7.8 · 7.8% likely

   Microsoft

9. Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.CVE-2021-28976Get-Simple · 7.5% likely

   CWE-434Get-Simple

10. PandoraFMS <=7.54 allows arbitrary file upload, it leading to remote command execution via the File Manager. To bypass the built-in protection, a relative path is used in the requ…CVE-2021-34074Pandorafms · 7.5% likely

    CWE-434Pandora FMS

11. Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriterCVE-2021-30468Apache Software Foundation · 7.0% likely

    CWE-400Apache

12. Server for NFS Denial of Service VulnerabilityCVE-2021-31974Microsoft · CVSS 7.5 · 6.7% likely

    Microsoft

13. Adobe RoboHelp Server folderId Directory Traversal Remote Code Execution VulnerabilityCVE-2021-28588Adobe · CVSS 8.8 · 6.2% likely

    CWE-22Adobe

14. Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the in…CVE-2021-22119Vmware · 6.0% likely

    CWE-400VMware

15. Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code executionCVE-2021-21099Adobe · CVSS 8.8 · 5.8% likely

    CWE-787Adobe

16. Adobe InDesign PCX file parsing out-of-bounds write vulnerability could lead to remote code executionCVE-2021-21098Adobe · CVSS 8.8 · 5.8% likely

    CWE-787Adobe

17. SQL Injection vulnerability in gnuboard5 <=v5.3.2.8 via the table_prefix parameter in install_db.php.CVE-2020-18662Sir · 5.4% likely

    CWE-89Sir

18. GStreamer before 1.18.4 may perform an out-of-bounds read when handling certain ID3v2 tags.CVE-2021-3522Gstreamer · CVSS 5.5 · 5.4% likely

    CWE-125Gstreamer

19. Adobe InCopy DOCX file parsing directory traversal vulnerability could lead to remote code executionCVE-2021-21090Adobe · CVSS 8.8 · 5.4% likely

    CWE-22Adobe

20. Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component t…CVE-2021-33356Raspap · 5.3% likely

    CWE-269Raspap

21. On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. N…CVE-2021-23024F5 · 5.3% likely

    F5

22. A stored cross-site scripting (XSS) vulnerability was discovered in pfSense 2.4.5-p1 which allows an authenticated attacker to execute arbitrary web scripts via exploitation of th…CVE-2020-26693Pfsense · 5.3% likely

    CWE-79Pfsense

23. In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in oc…CVE-2021-33571Djangoproject · 5.3% likely

    CWE-918Djangoproject

24. ASP.NET Core Denial of Service VulnerabilityCVE-2021-31957Microsoft · CVSS 5.9 · 5.1% likely

    CWE-400Microsoft

25. An unauthenticated XSS vulnerability exists in several IoT devices from CHIYU Technology, including BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, BF-MINI-W, and SEMA…CVE-2021-31641Chiyu-Tech · 5.1% likely

    CWE-79Chiyu-Tech

26. Adobe Acrobat Reader use-after-free could lead to arbitrary code executionCVE-2021-28562Adobe · CVSS 8.8 · 5.1% likely

    CWE-416Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.