https://github.com/revive-adserver/revive-adserver

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Revive Adserver <5.1.0 - Open RedirectCVE-2021-22873Revive-Adserver · 70% likely

   CWE-6011 bounty report

2. Revive Adserver <=5.0.3 - Cross-Site ScriptingCVE-2020-8115Revive-Adserver · 7.0% likely

   CWE-791 bounty report

3. An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a…CVE-2020-8143Revive-Adserver · 70% likely

   CWE-6011 bounty report

4. Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not b…CVE-2021-22889Revive-Adserver · 31% likely

   CWE-791 bounty report

5. Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter.CVE-2021-22875Revive-Adserver · 18% likely

   CWE-791 bounty report

6. Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter.CVE-2021-22874Revive-Adserver · 18% likely

   CWE-791 bounty report

7. Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php. An attacker could trick a user with access to th…CVE-2021-22888Revive-Adserver · 16% likely

   CWE-791 bounty report

8. Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While this issue was previo…CVE-2021-22872Revive-Adserver · 3.5% likely

   CWE-791 bounty report

9. Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker cou…CVE-2021-22948Revive-Adserver · 2.7% likely

   CWE-792 bounty reports

10. Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the af…CVE-2021-22871Revive-Adserver · 2.1% likely

    CWE-791 bounty report

11. A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requ…CVE-2020-8142Revive-Adserver · 0.6% likely

    CWE-8631 bounty report

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.