Possible (1 to 10%)

Every one of the 763 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Auth weakness in JNDIRealmCVE-2021-30640Apache Software Foundation · 9.9% likely

   CWE-116Apache

2. fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and…CVE-2021-339099.8% likely

   CWE-190

3. Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intendedCVE-2021-26920Apache Software Foundation · 9.5% likely

   CWE-610Apache

4. An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the…CVE-2021-325589.2% likely

   CWE-74

5. basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value (involving strdupa and alloca for a pathname controlled…CVE-2021-33910CVSS 5.5 · 8.8% likely

   CWE-770

6. Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit…CVE-2021-2389Oracle Corporation · CVSS 5.9 · 8.3% likely

   Oracle

7. Overwolf Client 0.169.0.22 allows XSS, with resultant Remote Code Execution, via an overwolfstore:// URL.CVE-2021-335017.9% likely

   CWE-79

8. Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions on Windows platforms. More specifically, improper configur…CVE-2021-22921NodeJS · 7.4% likely

   CWE-732Node.js

9. Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explore…CVE-2021-20110Manage Engine Asset Explorer Agent · 7.4% likely

   CWE-190

10. The crypto/tls package of Go through 1.16.5 does not properly assert that the type of public key in an X.509 certificate matches the expected type when doing a RSA based key excha…CVE-2021-345587.0% likely

    CWE-295

11. DoS after non-blocking IO errorCVE-2021-30639Apache Software Foundation · 6.9% likely

    CWE-755Apache

12. Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-34467Microsoft · CVSS 7.1 · 6.6% likely

    Microsoft

13. Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2021-34519Microsoft · CVSS 5.3 · 6.1% likely

    Microsoft

14. admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath can have directory t…CVE-2020-268066.0% likely

    CWE-22

15. 2FA bypass in Kaseya VSA <= v9.5.6CVE-2021-30120CVSS 9.9 · 5.7% likely

    CWE-669

16. A buffer overflow vulnerability in Ap4ElstAtom.cpp of Bento 1.5.1-628 leads to a denial of service (DOS).CVE-2020-197195.7% likely

    CWE-120

17. The web console for Mimosa B5, B5c, and C5x firmware through 2.8.0.2 allows authenticated command injection in the Throughput, WANStats, PhyStats, and QosStats API classes. An att…CVE-2020-252065.3% likely

    CWE-78

18. Zoho ManageEngine ADManager Plus before 7110 allows remote code execution.CVE-2021-339115.3% likely
19. Trend Micro Password Manager (Consumer) version 5.0.0.1217 and below is vulnerable to an Exposed Hazardous Function Remote Code Execution vulnerability which could allow an unpriv…CVE-2021-32462Trend Micro · 5.2% likely

    Trend Micro

20. PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest (unauthenticated) can inject a malicious SQL query in order to affect the execution of predefined SQL…CVE-2021-375935.2% likely

    CWE-89

21. Visual Studio Code Remote Code Execution VulnerabilityCVE-2021-34529Microsoft · CVSS 7.8 · 5.1% likely

    Microsoft

22. (Semi-)Authenticated local file inclusion in Kaseya VSA < v9.5.6CVE-2021-30121CVSS 6.5 · 5.0% likely

    CWE-829

23. Include Me <= 1.2.1 - Authenticated Remote Code Execution (RCE) via LFI log poisoningCVE-2021-24453Include Me · 5.0% likely

    CWE-22

24. An command injection vulnerability in HNAP1/SetWLanApcliSettings of Motorola CX2 router CX 1.0.2 Build 20190508 Rel.97360n allows attackers to execute arbitrary system commands.CVE-2020-219374.8% likely

    CWE-78

25. Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any…CVE-2021-20108Manage Engine Asset Explorer Agent · 4.5% likely

    CWE-401

26. Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-34520Microsoft · CVSS 8.1 · 4.4% likely

    CWE-502Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.