Possible (1 to 10%)

Every one of the 606 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Duplicate Post WordPress Plugin SQL Injection VulnerabilityCVE-2021-43408Copy Delete Posts · CVSS 6.5 · 9.7% likely

   CWE-89

2. In Ericsson Network Location before 2021-07-31, it is possible for an authenticated attacker to inject commands via file_name in the export functionality. For example, a new admin…CVE-2021-433399.6% likely

   CWE-77

3. A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via…CVE-2020-253688.6% likely

   CWE-78

4. A command injection vulnerability was discovered in the HNAP1 protocol in D-Link DIR-823G devices with firmware V1.0.2B05. An attacker is able to execute arbitrary web scripts via…CVE-2020-253678.6% likely

   CWE-78

5. A SQL injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the id parameter to the announcements_student.php web page. As a result a malicious user…CVE-2021-426708.4% likely

   CWE-89

6. Buffer overflow in the Bluetooth SDP dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileCVE-2021-39925Wireshark Foundation · CVSS 7.5 · 8.1% likely

   CWE-120Wireshark Foundation

7. Zoho ManageEngine Patch Connect Plus before 90099 is vulnerable to unauthenticated remote code execution.CVE-2021-418338.0% likely

   CWE-434

8. Buffer overflow in the Bluetooth HCI_ISO dissector in Wireshark 3.4.0 to 3.4.9 allows denial of service via packet injection or crafted capture fileCVE-2021-39926Wireshark Foundation · CVSS 7.5 · 8.0% likely

   CWE-120Wireshark Foundation

9. Microsoft Exchange Server Spoofing VulnerabilityCVE-2021-42305Microsoft · CVSS 6.5 · 7.9% likely

   Microsoft

10. Zoho ManageEngine ADManager Plus before 7115 is vulnerable to a filter bypass that leads to file-upload remote code execution.CVE-2021-420027.5% likely
11. A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.CVE-2021-435797.3% likely

    CWE-787

12. OS Command Injection in debug_fcgi in D-Link DWR-932C E1 Firmware 1.0.0.4CVE-2021-42784D-Link · 7.1% likely

    CWE-78D-Link

13. Remote Desktop Protocol Client Information Disclosure VulnerabilityCVE-2021-38665Microsoft · CVSS 7.4 · 7.0% likely

    Microsoft

14. 3D Viewer Remote Code Execution VulnerabilityCVE-2021-43209Microsoft · CVSS 7.8 · 6.8% likely

    Microsoft

15. Zoho ManageEngine M365 Manager Plus before 4421 is vulnerable to file-upload remote code execution.CVE-2021-420996.8% likely

    CWE-434

16. A brute-force protection bypass in CAPTCHA protection in ASUS ROG Rapture GT-AX11000, RT-AX3000, RT-AX55, RT-AX56U, RT-AX56U_V2, RT-AX58U, RT-AX82U, RT-AX82U GUNDAM EDITION, RT-AX…CVE-2021-414356.5% likely

    CWE-307

17. Arbitrary file deletion on logoutCVE-2021-44140Apache Software Foundation · 6.4% likely

    CWE-276Apache

18. A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as t…CVE-2021-423726.1% likely

    CWE-78

19. A flaw was found in ImageMagick where it did not properly sanitize certain input before using it to invoke convert processes. This flaw allows an attacker to create a specially cr…CVE-2021-3962ImageMagick · 6.0% likely

    CWE-416

20. NULL pointer exception in the IEEE 802.11 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileCVE-2021-39928Wireshark Foundation · CVSS 7.5 · 5.9% likely

    CWE-476Wireshark Foundation

21. Hitachi Vantara Pentaho Business Analytics through 9.1 allows an unauthenticated user to execute arbitrary SQL queries on any Pentaho data source and thus retrieve data from the r…CVE-2021-34684CVSS 9.8 · 5.9% likely

    CWE-89

22. Microsoft Defender Remote Code Execution VulnerabilityCVE-2021-42298Microsoft · CVSS 7.8 · 5.8% likely

    CWE-94Microsoft

23. 4MOSAn GCB Doctor - Improper AuthorizationCVE-2021-423384MOSAn · CVSS 9.8 · 5.8% likely

    CWE-285

24. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400v2 1.0.4.106_10.0.80 routers. Authentication is not requir…CVE-2021-34991NETGEAR · CVSS 8.8 · 5.7% likely

    CWE-121NETGEAR

25. Buffer overflow in the C12.22 dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileCVE-2021-39922Wireshark Foundation · CVSS 7.5 · 5.6% likely

    CWE-120Wireshark Foundation

26. Large loop in the Bluetooth DHT dissector in Wireshark 3.4.0 to 3.4.9 and 3.2.0 to 3.2.17 allows denial of service via packet injection or crafted capture fileCVE-2021-39924Wireshark Foundation · CVSS 7.5 · 5.3% likely

    CWE-834Wireshark Foundation

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.