Possible (1 to 10%)

Every one of the 880 is a mark on the map. Named now: 1 to 26, most at risk first.

1. OpenEMR 6.0.0 has a pnotes_print.php?noteid= Insecure Direct Object Reference vulnerability via which an attacker can read the messages of all users.CVE-2021-40352Open-Emr · 9.7% likely

   CWE-639Open-Emr

2. Zoho ManageEngine ADManager Plus version 7110 and prior is vulnerable to unrestricted file upload, leading to remote code execution.CVE-2021-37761Zohocorp · 9.5% likely

   CWE-434Zoho (ManageEngine)

3. A vulnerability in Trend Micro ServerProtect for Storage 6.0, ServerProtect for EMC Celerra 5.8, ServerProtect for Network Appliance Filers 5.8, and ServerProtect for Microsoft Wi…CVE-2021-36745Trend Micro · 9.4% likely

   CWE-425Trend Micro

4. Plastic SCM before 10.0.16.5622 mishandles the WebAdmin server management interface.CVE-2021-41382Plasticscm · 8.9% likely
5. Medium by Adobe file parsing buffer overflow vulnerability could lead to arbitrary code executionCVE-2021-28580Adobe · CVSS 8.8 · 8.5% likely

   CWE-120Adobe

6. Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in function CJBig2Image::expand() and results…CVE-2021-30354Amazon · 8.4% likely

   CWE-680Amazon

7. A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials or with the CSRF vuln…CVE-2021-40964Prasathmani · 8.2% likely

   CWE-22Prasathmani

8. Adobe Illustrator memory corruption vulnerability could lead to remote code executionCVE-2021-21105Adobe · CVSS 8.8 · 8.0% likely

   CWE-788Adobe

9. Symlink Exchange Can Allow Host Filesystem AccessCVE-2021-25741Kubernetes · CVSS 8.8 · 8.0% likely

   CWE-20Kubernetes

10. Adobe Bridge Buffer Overflow leads to Arbitrary Code ExecutionCVE-2021-36075Adobe · CVSS 7.8 · 7.5% likely

    CWE-120Adobe

11. Adobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2021-36073Adobe · CVSS 7.8 · 7.5% likely

    CWE-122Adobe

12. Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information and/or execute arbitrary code via the 'FileManager.rename()' funct…CVE-2020-19155Jflyfox · 7.5% likely

    CWE-668Jflyfox

13. In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium…CVE-2021-38112Amazon · 7.5% likely

    CWE-88Amazon

14. Bypass of the secureValidation propertyCVE-2021-40690Apache Software Foundation · 7.4% likely

    CWE-200Apache

15. Apache Tomcat DoS with unexpected TLS packetCVE-2021-41079Apache Software Foundation · 7.2% likely

    CWE-20Apache

16. Delta Electronics DOPSoft 2 Stack-Based Buffer OverflowCVE-2021-38402Delta Electronics · CVSS 7.8 · 7.1% likely

    CWE-121Delta Electronics

17. Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privileges to root.CVE-2021-30355Amazon · 6.9% likely

    CWE-269Amazon

18. Microsoft Word Remote Code Execution VulnerabilityCVE-2021-38656Microsoft · CVSS 7.8 · 6.7% likely

    CWE-416Microsoft

19. When sending data to an MQTT server, libcurl <= 7.73.0 and 7.78.0 could in some circumstances erroneously keep a pointer to an already freed memory area and both use that again in…CVE-2021-22945Haxx · CVSS 9.1 · 6.7% likely

    CWE-415Haxx1 bounty report

20. The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server m…CVE-2021-22006Vmware · 6.6% likely

    VMware

21. Bypass deserialization checks in Apache DubboCVE-2021-37579Apache Software Foundation · 6.6% likely

    CWE-502Apache

22. Adobe Illustrator memory corruption vulnerability could lead to remote code executionCVE-2021-21104Adobe · CVSS 8.8 · 6.6% likely

    CWE-788Adobe

23. Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-38655Microsoft · CVSS 7.8 · 6.4% likely

    CWE-416Microsoft

24. Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2021-38659Microsoft · CVSS 7.8 · 6.4% likely

    Microsoft

25. Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2021-38658Microsoft · CVSS 7.8 · 6.4% likely

    CWE-843Microsoft

26. Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2021-38654Microsoft · CVSS 7.8 · 6.4% likely

    CWE-129Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.