Possible (1 to 10%)

Every one of the 822 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Delta Electronics CNCSoftCVE-2021-43982Delta Electronics · CVSS 7.8 · 9.6% likely

   CWE-121Delta Electronics

2. Delta Electronics DIAEnergie (Update A)CVE-2021-44544Delta Electronics · CVSS 7.5 · 9.5% likely

   CWE-79Delta Electronics

3. Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to s…CVE-2021-20134Dlink · 7.8% likely

   CWE-22D-Link

4. Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityCVE-2021-43893Microsoft · CVSS 7.5 · 6.7% likely

   CWE-668Microsoft

5. Zoho ManageEngine ServiceDesk Plus MSP before 10.5 Build 10534 is vulnerable to unauthenticated remote code execution due to a filter bypass in which authentication is not require…CVE-2021-44675Zohocorp · 6.7% likely

   CWE-287Zoho (ManageEngine)

6. Windows Encrypting File System (EFS) Remote Code Execution VulnerabilityCVE-2021-43217Microsoft · CVSS 8.1 · 6.5% likely

   Microsoft

7. Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account.CVE-2021-45814Nettemp · 6.3% likely

   CWE-89

8. An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. Multiple functions in the bpserverd daemon were vulnerable to arbitrary remote code execution as root.…CVE-2021-43033Kaseya · 6.2% likely

   CWE-78Kaseya

9. An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead…CVE-2021-21883Lantronix · CVSS 9.9 · 6.1% likely

   CWE-78Lantronix

10. An OS command injection vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbit…CVE-2021-21882Lantronix · CVSS 9.9 · 6.1% likely

    CWE-78Lantronix

11. An OS command injection vulnerability exists in the Web Manager Diagnostics: Traceroute functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can…CVE-2021-21872Lantronix · CVSS 9.9 · 6.1% likely

    CWE-78Lantronix

12. Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL inject…CVE-2021-44655Online Pre-Owned/used Car Showroom Management System Project · 6.0% likely

    CWE-89

13. Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerabili…CVE-2021-44653Oretnom23 · 6.0% likely

    CWE-89Oretnom23

14. Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6CVE-2021-35244SolarWinds · CVSS 6.8 · 6.0% likely

    CWE-434SolarWinds

15. OpUtils in Zoho ManageEngine OpManager 12.5 before 125490 mishandles authentication for a few audit directories.CVE-2021-44514Zohocorp · 5.5% likely

    CWE-287Zoho (ManageEngine)

16. iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in Ghosts…CVE-2021-43113Itextpdf · CVSS 9.8 · 5.4% likely

    CWE-77Itextpdf

17. Remote Code Execution (RCE)CVE-2021-23639Markdown To Pdf Project · CVSS 9.8 · 5.4% likely
18. Microsoft Office Graphics Remote Code Execution VulnerabilityCVE-2021-43875Microsoft · CVSS 7.8 · 5.4% likely

    Microsoft

19. An OS command injection vulnerability exists in the Web Manager SslGenerateCSR functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to…CVE-2021-21884Lantronix · CVSS 9.1 · 5.3% likely

    CWE-78Lantronix

20. Apache Solr information disclosure vulnerability through DataImportHandlerCVE-2021-44548Apache Software Foundation · 5.2% likely

    CWE-40Apache

21. calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.CVE-2021-44686Calibre-Ebook · 5.2% likely

    CWE-400Calibre-Ebook

22. Template injection in vault-cliCVE-2021-43837peopledoc · CVSS 8.4 · 5.2% likely

    CWE-74

23. A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry (hive) file, which would cause hivex to recursively call the _get…CVE-2021-3622Redhat · 5.0% likely

    CWE-400Red Hat

24. Potential integer underflow upon receiving STUN message in PJSIPCVE-2021-37706pjsip · CVSS 7.3 · 4.9% likely

    CWE-191Pjsip

25. RCE from attacker with configuration edit priviledges through JNDI lookupCVE-2021-42550QOS.ch · CVSS 6.6 · 4.8% likely

    CWE-502

26. Blind SQLi using Search filters in PrestaShopCVE-2021-43789PrestaShop · CVSS 7.5 · 4.7% likely

    CWE-89PrestaShop

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.