Likely to be exploited (10% or more)

Every one of the 56 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection…CVE-2021-37344Nagios · 97% likely

   CWE-78Nagios

2. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34833Foxit · CVSS 7.8 · 96% likely

   CWE-416Foxit

3. SM2 Decryption Buffer OverflowCVE-2021-3711OpenSSL · 88% likely

   CWE-120OpenSSL1 bounty report

4. Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd…CVE-2021-35392Realtek · 82% likely

   CWE-787Realtek

5. Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.CVE-2021-37350Nagios · 79% likely

   CWE-89Nagios

6. A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username paramet…CVE-2021-33256Zohocorp · 79% likely

   CWE-1236Zoho (ManageEngine)

7. Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command (OS Command injec…CVE-2021-37346Nagios · 74% likely

   CWE-78Nagios

8. An issue has been discovered in GitLab affecting all versions starting with 13.3. GitLab was vulnerable to a stored XSS by using the design feature in issues.CVE-2021-22238GitLab · CVSS 6.8 · 72% likely

   CWE-79GitLab

9. Realtek Jungle SDK version v2.x up to v3.4.14B provides a 'WiFi Simple Config' server that implements both UPnP and SSDP protocols. The binary is usually named wscd or mini_upnpd…CVE-2021-35393Realtek · 66% likely

   CWE-787Realtek

10. Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then…CVE-2021-37425Altova · 66% likely

    CWE-611Altova

11. Adobe Acrobat Reader DC setAction Use-After-Free Remote Code Execution VulnerabilityCVE-2021-28639Adobe · CVSS 7.8 · 66% likely

    CWE-416Adobe

12. Insufficient input sanitization in Mermaid markdown in GitLab CE/EE version 11.4 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-c…CVE-2021-22242GitLab · CVSS 8.7 · 64% likely

    CWE-79GitLab

13. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34847Foxit · CVSS 7.8 · 62% likely

    CWE-416Foxit

14. Windows TCP/IP Remote Code Execution VulnerabilityCVE-2021-26424Microsoft · CVSS 9.9 · 61% likely

    Microsoft

15. (Authenticated) Remote Code Execution Possible in Web Interface 5.5CVE-2021-32706pi-hole · CVSS 7.6 · 60% likely

    CWE-94Pi-Hole

16. Adobe Acrobat Reader Use-After-Free Arbitrary Code Execution VulnerabilityCVE-2021-28640Adobe · CVSS 7.3 · 53% likely

    CWE-416Adobe

17. Microsoft Office Remote Code Execution VulnerabilityCVE-2021-34478Microsoft · CVSS 7.8 · 52% likely

    Microsoft

18. Adobe Acrobat Reader Use-After-Free VulnerabilityCVE-2021-28635Adobe · CVSS 7.8 · 51% likely

    CWE-416Adobe

19. Booster for WooCommerce <= 5.4.3 Authentication BypassCVE-2021-34646Pluggabl LLC · CVSS 9.8 · 51% likely

    CWE-290Pluggabl LLC

20. Read buffer overruns processing ASN.1 stringsCVE-2021-3712OpenSSL · CVSS 7.4 · 48% likely

    CWE-125OpenSSL

21. Request splitting via HTTP/2 method injection and mod_proxyCVE-2021-33193Apache Software Foundation · 46% likely

    Apache1 bounty report

22. Adobe Acrobat Reader DC Path Parsing Out-Of-Bounds Read could lead to arbitrary code executionCVE-2021-28554Adobe · CVSS 7.8 · 46% likely

    CWE-125Adobe

23. Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.CVE-2021-39608Flatcore · 46% likely

    CWE-434Flatcore

24. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulne…CVE-2021-34850Foxit · CVSS 7.8 · 38% likely

    CWE-416Foxit

25. Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.CVE-2021-32955Deltaww · 37% likely

    CWE-434Deltaww

26. Scripting Engine Memory Corruption VulnerabilityCVE-2021-34480Microsoft · CVSS 6.8 · 34% likely

    CWE-787Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.