Check available, not yet exploited

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

1. MovableType - Remote Command InjectionCVE-2021-20837Six Apart Ltd. · 88% likely

   CWE-78Six Apart Ltd.

2. Cobbler <3.3.0 - Remote Code ExecutionCVE-2021-40323Cobbler Project · 87% likely

   CWE-94Cobbler Project

3. Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command InjectionCVE-2021-42071Visual-Tools · 70% likely

   CWE-78

4. Maian Cart <=3.8 - Remote Code ExecutionCVE-2021-32172Maianscriptworld · 66% likely

   CWE-862Maianscriptworld

5. ZTE MF971R - Referer authentication bypassCVE-2021-21745Zte · 56% likely

   CWE-352ZTE

6. PuneethReddyHC Online Shopping System homeaction.php SQL InjectionCVE-2021-41649Online-Shopping-System-Advanced Project · 52% likely

   CWE-89

7. MKdocs 1.2.2 - Directory TraversalCVE-2021-40978Mkdocs · 15% likely

   CWE-22

8. SonicWall SonicOS 7.0 - Open RedirectCVE-2021-20031SonicWall · 13% likely

   CWE-601SonicWall

9. WebCTRL OEM <= 6.5 - Cross-Site ScriptingCVE-2021-31682Automatedlogic · 11% likely

   CWE-79Automated Logic

10. PuneethReddyHC action.php SQL InjectionCVE-2021-41648Online-Shopping-System-Advanced Project · 10% likely

    CWE-89

11. Galera WebTemplate 1.0 Directory TraversalCVE-2021-40960Galera · 9.9% likely

    CWE-22

12. i-Panel Administration System 2.0 - Cross-Site ScriptingCVE-2021-41878Hkurl · 9.9% likely

    CWE-791 bounty report

13. BIQS IT Biqs-drive v1.83 Local File InclusionCVE-2021-39433Biqs · 8.7% likely
14. myfactory FMS - Cross-Site ScriptingCVE-2021-42566Myfactory · 5.8% likely

    CWE-79

15. myfactory FMS - Cross-Site ScriptingCVE-2021-42565Myfactory · 5.8% likely

    CWE-79

16. Bludit 3.13.1 - Cross Site ScriptingCVE-2021-35323Bludit · 5.1% likely

    CWE-79Bludit

17. rConfig 3.9.6 - Local File InclusionCVE-2021-29006Rconfig · 4.9% likely

    CWE-22Rconfig

18. SysAid 20.4.74 - Cross-Site ScriptingCVE-2021-31862Sysaid · 4.0% likely

    CWE-79Sysaid

19. JustWriting - Cross-Site ScriptingCVE-2021-41467Justwriting Project · 3.6% likely

    CWE-79

20. Opensis-Classic 8.0 - Cross-Site ScriptingCVE-2021-40542Os4ed · 3.2% likely

    CWE-79Os4ed

21. Spotweb <= 1.5.1 - Cross Site ScriptingCVE-2021-40973Spotweb Project · 2.3% likely

    CWE-79Spotweb Project

22. Spotweb <= 1.5.1 - Cross Site ScriptingCVE-2021-40972Spotweb Project · 2.3% likely

    CWE-79Spotweb Project

23. FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site ScriptingCVE-2021-39350FV Flowplayer Video Player · CVSS 6.1 · 2.2% likely

    CWE-79

24. Spotweb <= 1.5.1 - Cross Site ScriptingCVE-2021-40971Spotweb Project · 2.2% likely

    CWE-79Spotweb Project

25. Spotweb <= 1.5.1 - Cross Site ScriptingCVE-2021-40970Spotweb Project · 2.2% likely

    CWE-79Spotweb Project

26. Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)CVE-2021-40969Spotweb Project · 2.2% likely

    CWE-79Spotweb Project

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.