Possible (1 to 10%)

Every one of the 980 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesCVE-2021-1609Cisco · CVSS 9.8 · 9.7% likely

   CWE-121Cisco

2. Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management VulnerabilitiesCVE-2021-1610Cisco · CVSS 9.8 · 9.1% likely

   CWE-121Cisco

3. Network Attached Storage on LG N1T1*** 10124 devices allows an unauthenticated attacker to gain root access via OS command injection in the en/ajp/plugins/access.ssh/checkInstall.…CVE-2021-38306Lg · 9.0% likely

   CWE-78LG

4. An issue was discovered in D-Link DIR816_A1_FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, w…CVE-2021-39510Dlink · 8.6% likely

   CWE-77D-Link

5. Inefficient Regular Expression Complexity in axios/axiosCVE-2021-3749axios · CVSS 7.5 · 8.5% likely

   CWE-1333Axios

6. A firmware validation issue was discovered in HMI3 Control Panel in Swisslog Healthcare Nexus Panel operated by released versions of software before Nexus Software 7.2.5.7. There…CVE-2021-37160Swisslog-Healthcare · 8.2% likely

   CWE-347Swisslog-Healthcare

7. Bold Page Builder < 3.1.6 - PHP Object InjectionCVE-2021-24579Bold-Themes · 8.2% likely

   CWE-502BoldThemes

8. TastyIgniter 3.0.7 allows XSS via /account, /reservation, /admin/dashboard, and /admin/system_logs.CVE-2021-38699Tastyigniter · 8.0% likely

   CWE-79Tastyigniter

9. Adobe Animate heap corruption vulnerability could lead to arbitrary code executionCVE-2021-28629Adobe · CVSS 7.8 · 7.8% likely

   CWE-122Adobe

10. Adobe Animate heap corruption vulnerability could lead to arbitrary code executionCVE-2021-28620Adobe · CVSS 7.8 · 7.8% likely

    CWE-122Adobe

11. A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive uploaded in the administ…CVE-2021-22937Ivanti · 7.8% likely

    CWE-434Ivanti

12. Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoningCVE-2021-32803npm · CVSS 8.2 · 7.8% likely

    CWE-22Npm, Inc.

13. Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-36947Microsoft · CVSS 8.8 · 7.6% likely

    Microsoft

14. Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-36936Microsoft · CVSS 8.8 · 7.5% likely

    Microsoft

15. Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2021-28624Adobe · CVSS 7.8 · 7.2% likely

    CWE-122Adobe

16. Zoho ManageEngine Log360 before Build 5219 allows unrestricted file upload with resultant remote code execution.CVE-2021-40175Zohocorp · 7.0% likely

    CWE-434Zoho (ManageEngine)

17. Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.CVE-2021-30598Google · 7.0% likely

    CWE-843Google

18. This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6. A malicious application may bypass Gatekeeper checks.CVE-2021-30853Apple · 6.9% likely

    CWE-787Apple

19. Adobe Photoshop PSD File Parsing Stack Overflow VulnerabilityCVE-2021-36005Adobe · CVSS 7.8 · 6.8% likely

    CWE-121Adobe

20. Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714jhy · CVSS 7.5 · 6.7% likely

    CWE-835

21. Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-30573Google · 6.3% likely

    CWE-416Google

22. libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching f…CVE-2021-22924Haxx · CVSS 3.7 · 6.3% likely

    CWE-20Haxx2 bounty reports

23. A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.3.37598. A specially crafted PDF document can trigger the reuse of prev…CVE-2021-21831Foxit · CVSS 8.8 · 6.1% likely

    CWE-416Foxit

24. An open redirect vulnerability exists in Nagios XI before version 5.8.5 that could lead to spoofing. To exploit the vulnerability, an attacker could send a link that has a special…CVE-2021-37352Nagios · 6.1% likely

    CWE-601Nagios

25. In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.CVE-2021-36981Sernet · 6.0% likely

    CWE-502

26. Arbitrary file upload vulnerability in OFBizCVE-2021-37608Apache Software Foundation · 6.0% likely

    CWE-434Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.