Drupal Core

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.CVE-2017-6920Drupal.org · 20% likely

   CWE-19

2. Drupal 8.4.x versions before 8.4.5 and Drupal 7.x versions before 7.57 has a Drupal.checkPlain() JavaScript function which is used to escape potentially dangerous text before outp…CVE-2017-6927Drupal.org · 1.6% likely

   CWE-79

3. In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback fo…CVE-2017-6930Drupal.org · 1.3% likely
4. A jQuery cross site scripting vulnerability is present when making Ajax requests to untrusted domains. This vulnerability is mitigated by the fact that it requires contributed or…CVE-2017-6929Drupal.org · 1.2% likely

   CWE-79

5. In Drupal versions 8.4.x versions before 8.4.5 users with permission to post comments are able to view content and comments they do not have access to, and are also able to add co…CVE-2017-6926Drupal.org · 1.2% likely

   CWE-200

6. Drupal core 7.x versions before 7.57 has an external link injection vulnerability when the language switcher block is used. A similar vulnerability exists in various custom and co…CVE-2017-6932Drupal.org · 1.2% likely

   CWE-601

7. In Drupal versions 8.4.x versions before 8.4.5 the Settings Tray module has a vulnerability that allows users to update certain data that they do not have the permissions for. If…CVE-2017-6931Drupal.org · 1.1% likely

   CWE-434

8. Drupal core 7.x versions before 7.57 when using Drupal's private file system, Drupal will check to make sure a user has access to a file before allowing the user to view or downlo…CVE-2017-6928Drupal.org · 1.0% likely

   CWE-732

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.