Likely to be exploited (10% or more)

Every one of the 59 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35590Oracle Corporation · CVSS 6.3 · 88% likely

   CWE-787Oracle

2. Shell Command Injection Vulnerability in Nimbus Thrift ServerCVE-2021-38294Apache Software Foundation · 84% likely

   CWE-74Apache

3. Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-37926Zohocorp · 74% likely

   CWE-434Zoho (ManageEngine)

4. Zoho ManageEngine ADManager Plus version 7110 and prior allows unrestricted file upload which leads to remote code execution.CVE-2021-37918Zohocorp · 74% likely

   CWE-434Zoho (ManageEngine)

5. Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.CVE-2021-40324Cobbler Project · 69% likely

   CWE-434Cobbler Project

6. An issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type…CVE-2021-40344Nagios · 65% likely

   CWE-434Nagios

7. Unsafe Pre-Authentication Deserialization In WorkersCVE-2021-40865Apache Software Foundation · 64% likely

   CWE-502Apache

8. An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix…CVE-2021-42342Embedthis · 59% likely

   CWE-434Embedthis

9. SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can…CVE-2021-42840Salesagility · 59% likely

   CWE-434Salesagility

10. Catch Themes Demo Import <= 1.7 Admin+ Arbitrary File UploadCVE-2021-39352Catch Themes Demo Import · CVSS 7.2 · 56% likely

    CWE-434

11. Adobe Acrobat Reader DC Use After Free Arbitrary Code ExecutionCVE-2021-40728Adobe · CVSS 7.8 · 55% likely

    CWE-416Adobe

12. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 an…CVE-2021-35592Oracle Corporation · CVSS 6.3 · 52% likely

    CWE-129Oracle

13. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35598Oracle Corporation · CVSS 6.3 · 51% likely

    CWE-129Oracle

14. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35594Oracle Corporation · CVSS 6.3 · 51% likely

    CWE-129Oracle

15. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35593Oracle Corporation · CVSS 6.3 · 51% likely

    CWE-787Oracle

16. Zoho ManageEngine OpManager before 125437 is vulnerable to SQL Injection in the support diagnostics module. This occurs via the pollingObject parameter of the getDataCollectionFai…CVE-2021-40493Zohocorp · 50% likely

    CWE-89Zoho (ManageEngine)

17. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and p…CVE-2021-35621Oracle Corporation · CVSS 6.3 · 50% likely

    Oracle

18. Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2021-40487Microsoft · CVSS 8.1 · 48% likely

    CWE-94Microsoft

19. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33731Siemens · 47% likely

    CWE-89Siemens

20. This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.0.1. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.CVE-2021-30833Apple · 43% likely

    Apple

21. XSS in the `of` option of the `.position()` utilCVE-2021-41184jquery · CVSS 6.5 · 41% likely

    CWE-79Jquery

22. XSS in the `altField` option of the Datepicker widgetCVE-2021-41182jquery · CVSS 6.5 · 39% likely

    CWE-79Jquery

23. Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.CVE-2021-22930NodeJS · 36% likely

    CWE-416Node.js

24. ManageEngine ADManager Plus Build 7111 contains a post-authentication remote code execution vulnerability due to improperly validated file uploads in the PasswordExpiry interface.CVE-2021-20130Zohocorp · 33% likely

    CWE-434Zoho (ManageEngine)

25. Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is 6.4.3. Easily exploi…CVE-2021-35616Oracle Corporation · CVSS 5.4 · 28% likely

    Oracle

26. A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker could execute arbitrary commands in the local database by…CVE-2021-33734Siemens · 28% likely

    CWE-89Siemens

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.