Check available, not yet exploited

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Microsoft Exchange Server Pre-Auth POST Based Cross-Site ScriptingCVE-2021-41349Microsoft · CVSS 6.5 · 93% likely

   Microsoft

2. Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site ScriptingCVE-2021-41174grafana · CVSS 6.9 · 85% likely

   CWE-79Grafana

3. Resourcespace - Cross-Site ScriptingCVE-2021-41951Montala · 78% likely

   CWE-79Montala

4. TP-Link - OS Command InjectionCVE-2021-41653Tp-Link · 76% likely

   CWE-94TP-Link

5. Motorola Baby Monitors - Remote Command ExecutionCVE-2021-3577Motorola · CVSS 8.8 · 60% likely

   CWE-78Motorola

6. Wipro Holmes Orchestrator 20.4.1 - Information DisclosureCVE-2021-38147Wipro · 53% likely

   CWE-306

7. GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.CVE-2021-43778pluginsGLPI · CVSS 9.1 · 52% likely

   CWE-22pluginsGLPI

8. Hitachi Vantara Pentaho/Business Intelligence Server - Authentication BypassCVE-2021-31602Hitachi · CVSS 5.3 · 52% likely

   CWE-287Hitachi

9. Rosario Student Information System Unauthenticated SQL InjectionCVE-2021-44427Rosariosis · CVSS 9.8 · 51% likely

   CWE-89Rosariosis

10. MinIO Operator Console Authentication BypassCVE-2021-41266minio · CVSS 8.6 · 48% likely

    CWE-306MinIO

11. Apache ShenYu Admin JWT - Authentication BypassCVE-2021-37580Apache Software Foundation · 41% likely

    CWE-287Apache

12. WordPress Elementor Website Builder <3.1.4 - Cross-Site ScriptingCVE-2021-24891Elementor · 29% likely

    CWE-79Elementor

13. OptinMonster Plugin < 2.6.5 - Unprotected REST-APICVE-2021-39341OptinMonster · CVSS 8.2 · 22% likely

    CWE-319

14. Online Event Booking and Reservation System 2.3.0 - SQL InjectionCVE-2021-42667Online Event Booking And Reservation System Project · 16% likely

    CWE-89

15. Clustering Local File InclusionCVE-2021-43496Clustering Project · 16% likely

    CWE-22

16. Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code ExecutionCVE-2021-22053Vmware · 13% likely

    CWE-94VMware

17. WordPress Asgaros Forum <1.15.13 - SQL InjectionCVE-2021-24827Asgaros · 13% likely

    CWE-89Asgaros

18. Contest Gallery < 13.1.0.6 - SQL injectionCVE-2021-24915Contest Gallery · 12% likely

    CWE-89Contest-Gallery

19. Wipro Holmes Orchestrator 20.4.1 - Arbitrary File DownloadCVE-2021-38146Wipro · 12% likely

    CWE-22

20. Pie Register < 3.7.1.6 - Unauthenticated Arbitrary LoginCVE-2021-24647Genetechsolutions · 9.8% likely

    CWE-287Genetechsolutions

21. AlquistManager Local File InclusionCVE-2021-43495Alquistai · 9.2% likely

    CWE-22

22. Redash Setup Configuration - Default Secrets DisclosureCVE-2021-41192getredash · CVSS 8.1 · 8.1% likely

    CWE-1188Getredash

23. SAS/Internet 9.4 1520 - Local File InclusionCVE-2021-41569Sas · 8.0% likely

    CWE-829Sas

24. WP Attachment Export < 0.2.4 - Unrestricted File DownloadCVE-2015-20067Wp Attachment Export Project · 7.7% likely

    CWE-862

25. G Auto-Hyperlink <= 1.0.1 - SQL InjectionCVE-2021-24627G Auto-Hyperlink Project · 6.5% likely

    CWE-89

26. Pie Register < 3.7.1.6 - SQL InjectionCVE-2021-24731Genetechsolutions · 6.4% likely

    CWE-89Genetechsolutions

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.