Exploited in the wild

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. Apache Log4j2 Remote Code InjectionCVE-2021-44228Apache Software Foundation · CVSS 10 · 100% likely

   CWE-502ApacheAPT35APT419 bounty reports

2. Apache Log4j2 - Remote Code InjectionCVE-2021-45046Apache Software Foundation · CVSS 9 · 100% likely

   CWE-917Apache

3. SonicWall SMA100 Stack - Buffer Overflow/Remote Code ExecutionCVE-2021-20038SonicWall · CVSS 9.8 · 100% likely

   CWE-121SonicWall

4. Zoho ManageEngine Desktop Central - Remote Code ExecutionCVE-2021-44515Zoho · CVSS 9.8 · 100% likely

   Zoho (ManageEngine)

5. VMWare Workspace ONE UEM - Server-Side Request ForgeryCVE-2021-22054Omnissa · CVSS 7.5 · 100% likelycovered by CyberSIXT

   CWE-918Omnissa

6. Ivanti EPM Cloud Services Appliance Code InjectionCVE-2021-44529Ivanti · CVSS 9.8 · 99% likely

   CWE-94Ivanti1 bounty report

7. Grafana v8.x - Arbitrary File ReadCVE-2021-43798grafana · CVSS 7.5 · 89% likely

   CWE-22Grafana

8. Deserialization of Untrusted DataCVE-2021-23758Ajax.NET Professional · CVSS 8.1 · 83% likelycovered by CyberSIXT

   CWE-502Ajax.NET Professional7 articles

9. Arbitrary file upload vulnerability in FatPipe softwareCVE-2021-27860FatPipe · CVSS 9.8 · 40% likely

   CWE-434FatPipe

10. An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.…CVE-2021-39935GitLab · CVSS 6.8 · 36% likelycovered by CyberSIXT

    CWE-918GitLab

11. Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.CVE-2021-44207Acclaim Systems · CVSS 8.1 · 17% likely

    CWE-798Acclaim SystemsAPT41

12. Windows AppX Installer Spoofing VulnerabilityCVE-2021-43890Microsoft · CVSS 7.1 · 11% likely

    Microsoft

13. Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2021-43226Microsoft · CVSS 7.8 · 3.3% likely

    Microsoft

14. In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execut…CVE-2021-1048Android · CVSS 7.8 · 1.1% likely

    CWE-416Android

15. In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges…CVE-2021-0920Android · CVSS 6.4 · 0.9% likely

    CWE-416Android

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.