Ruby

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. Type confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different type of object than String as "retval" argument can cause arbitrary code execution.CVE-2016-2337Ruby · 6.2% likely
2. An exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize" function functionality of Ruby. In Fiddle::Function.new "initialize" heap buffer "arg_ty…CVE-2016-2339Ruby · 5.1% likely

   CWE-119

3. Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing different type of object than this assumed by developers can ca…CVE-2016-2336Ruby · 3.4% likely
4. verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which al…CVE-2015-1855Ruby · 2.8% likely

   CWE-20

5. Various methods in WEBrick::HTTPRequest in Ruby 1.9.2 and 1.8.7 and earlier do not validate the X-Forwarded-For, X-Forwarded-Host and X-Forwarded-Server headers in requests, which…CVE-2011-3624Ruby · 1.5% likely

   CWE-74

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.