Check available, not yet exploited

Every one of the 30 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Geutebruck - Remote Command InjectionCVE-2021-33544Geutebrück · CVSS 7.2 · 96% likely

   CWE-78Geutebrück

2. Nagios XI < 5.8.6 - Cross-Site ScriptingCVE-2021-38156Nagios · 93% likely

   CWE-79Nagios

3. ECOA Building Automation System - Directory Traversal Content DisclosureCVE-2021-41291ECOA · CVSS 7.5 · 83% likely

   CWE-22ECOA

4. Apache Airflow - Unauthenticated Variable ImportCVE-2021-38540Apache Software Foundation · 81% likely

   CWE-269Apache

5. Apache Druid - Local File InclusionCVE-2021-36749Apache Software Foundation · 81% likely

   CWE-863Apache

6. WordPress BulletProof Security 5.1 Information DisclosureCVE-2021-39327AITpro · CVSS 5.3 · 72% likely

   CWE-200Ait-Pro

7. SAP NetWeaver Development Infrastructure - Server Side Request ForgeryCVE-2021-33690SAP SE · CVSS 9.9 · 69% likely

   CWE-918SAP

8. Payara Micro Community 5.2021.6 Directory TraversalCVE-2021-41381Payara · 53% likely

   CWE-22Payara

9. Gurock TestRail Application files.md5 ExposureCVE-2021-40875Gurock · 47% likely

   CWE-425Gurock

10. WordPress Redux Framework <=4.2.11 - Information DisclosureCVE-2021-38314Redux.io · CVSS 5.3 · 29% likely

    CWE-2003 bounty reports

11. ECOA Building Automation System - Arbitrary File RetrievalCVE-2021-41293ECOA · CVSS 7.5 · 20% likely

    CWE-22ECOA

12. OS4Ed OpenSIS Community 8.0 - Local File InclusionCVE-2021-40651Os4ed · 18% likely

    CWE-22Os4ed

13. PlaceOS 1.2109.1 - Open RedirectionCVE-2021-41826Place · 12% likely

    CWE-601

14. Cloudron 6.2 Cross-Site ScriptingCVE-2021-40868Cloudron · 9.1% likely

    CWE-79

15. WordPress Podlove Podcast Publisher <3.5.6 - SQL InjectionCVE-2021-24666Podlove · 8.9% likely

    CWE-89Podlove

16. Aurelia-Path < 1.1.7 - Prototype PollutionCVE-2021-41097aurelia · CVSS 9.1 · 4.9% likely

    CWE-1321

17. GLPI 9.2/<9.5.6 - Information DisclosureCVE-2021-39211glpi-project · CVSS 5.3 · 4.5% likely

    CWE-200GLPI

18. Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File UploadCVE-2021-40524Pureftpd · 4.3% likely

    CWE-434Pureftpd

19. EyouCMS 1.5.4 Open RedirectCVE-2021-39501Eyoucms · 3.6% likely

    CWE-601Eyoucms

20. ClinicCases 7.3.3 Cross-Site ScriptingCVE-2021-38704Cliniccases · 3.5% likely

    CWE-79

21. Jeesns 1.4.2 - Cross-Site ScriptingCVE-2020-19295Jeesns · 3.5% likely

    CWE-79Jeesns

22. Jeesns 1.4.2 - Cross-Site ScriptingCVE-2020-19282Jeesns · 3.2% likely

    CWE-79Jeesns

23. WordPress MF Gig Calendar <=1.1 - Cross-Site ScriptingCVE-2021-24510Mf Gig Calendar Project · 2.8% likely

    CWE-79

24. Jeesns 1.4.2 - Cross-Site ScriptingCVE-2020-19283Jeesns · 2.6% likely

    CWE-79Jeesns

25. WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site ScriptingCVE-2021-39322cybernetikz · CVSS 6.1 · 2.3% likely

    CWE-79Cybernetikz

26. WordPress Under Construction <1.19 - Cross-Site ScriptingCVE-2021-39320Noah Kagan · CVSS 6.1 · 2.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.