Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 226 | CVE-2024-45519Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-10-03 | 2024-10-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 227 | CVE-2015-1427Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 228 | CVE-2020-7961Liferay — Liferay Portal Deserialization of Untrusted Data VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 229 | CVE-2014-0497Adobe — Adobe Flash Player Integer Underflow VulnerablityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 230 | CVE-2021-35394Realtek — Realtek Jungle SDK Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2021-12-10 | 2021-12-24KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 231 | CVE-2021-44515Zoho — Zoho Desktop Central Authentication Bypass VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2021-12-10 | 2021-12-24KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 232 | CVE-2021-36260Hikvision — Hikvision Improper Input ValidationExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 233 | CVE-2022-35914Teclib — Teclib GLPI Remote Code Execution VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2023-03-07 | 2023-03-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 234 | CVE-2022-46169Cacti — Cacti Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2023-02-16 | 2023-03-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 235 | CVE-2021-37415Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2021-12-01 | 2021-12-15KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 236 | CVE-2024-36401OSGeo — OSGeo GeoServer GeoTools Eval Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2024-07-15 | 2024-08-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 237 | CVE-2015-3113Adobe — Adobe Flash Player Heap-Based Buffer Overflow VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 238 | CVE-2022-1040Sophos — Sophos Firewall Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 239 | CVE-2020-13927Apache — Apache Airflow's Experimental API Authentication BypassExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 240 | CVE-2020-15505Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 241 | CVE-2019-16759vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 242 | CVE-2021-22054Omnissa — Omnissa Workspace ONE Server-Side Request ForgeryCISA federal deadline · Overdue by 7 months | 87 | 7.5 | 99.7% · 99.95th | 2026-03-09 | 2026-03-23CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 243 | CVE-2022-22965VMware — Spring Framework JDK 9+ Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 244 | CVE-2024-9465Palo Alto Networks — Palo Alto Networks Expedition SQL Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.2 | 99.6% · 99.95th | 2024-11-14 | 2024-12-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 245 | CVE-2023-20198Cisco — Cisco IOS XE Web UI Privilege Escalation VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 10.0 | 99.6% · 99.95th | 2023-10-16 | 2023-10-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 246 | CVE-2014-6278GNU — GNU Bash OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 87 | 8.8 | 99.6% · 99.95th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 247 | CVE-2021-33045Dahua — Dahua IP Camera Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 248 | CVE-2020-16846SaltStack — SaltStack Salt Shell Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 249 | CVE-2024-4040CrushFTP — CrushFTP VFS Sandbox Escape VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 10.0 | 99.5% · 99.95th | 2024-04-24 | 2024-05-01KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
| 250 | CVE-2018-20062ThinkPHP — ThinkPHP "noneCms" Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.5% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSynacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
EVRS 87 Immediate
Rank 226 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-10-03
- CISA deadline
- 2024-10-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 227 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Elastic
- Source
- CISA KEV
Liferay — Liferay Portal Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 228 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Liferay
- Source
- CISA KEV
Adobe — Adobe Flash Player Integer Underflow Vulnerablity
EVRS 87 Immediate
Rank 229 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Realtek — Realtek Jungle SDK Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 230 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2021-12-24 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
Zoho — Zoho Desktop Central Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 231 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2021-12-24 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Hikvision — Hikvision Improper Input Validation
EVRS 87 Immediate
Rank 232 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-01-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hikvision
- Source
- CISA KEV
Teclib — Teclib GLPI Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 233 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2023-03-07
- CISA deadline
- 2023-03-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Teclib
- Source
- CISA KEV
Cacti — Cacti Command Injection Vulnerability
EVRS 87 Immediate
Rank 234 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2023-02-16
- CISA deadline
- 2023-03-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cacti
- Source
- CISA KEV
Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 235 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2021-12-15 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
OSGeo — OSGeo GeoServer GeoTools Eval Injection Vulnerability
EVRS 87 Immediate
Rank 236 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2024-07-15
- CISA deadline
- 2024-08-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- OSGeo
- Source
- CISA KEV
Adobe — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
EVRS 87 Immediate
Rank 237 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Sophos — Sophos Firewall Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 238 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Apache — Apache Airflow's Experimental API Authentication Bypass
EVRS 87 Immediate
Rank 239 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 240 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
vBulletin — vBulletin PHP Module Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 241 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- vBulletin
- Source
- CISA KEV
Omnissa — Omnissa Workspace ONE Server-Side Request Forgery
EVRS 87 Immediate
Rank 242 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2026-03-09
- CISA deadline
- 2026-03-23 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Omnissa
- Source
- CISA KEV
VMware — Spring Framework JDK 9+ Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 243 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition SQL Injection Vulnerability
EVRS 87 Immediate
Rank 244 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.2 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-11-14
- CISA deadline
- 2024-12-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Cisco — Cisco IOS XE Web UI Privilege Escalation Vulnerability
EVRS 87 Immediate
Rank 245 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2023-10-16
- CISA deadline
- 2023-10-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
GNU — GNU Bash OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 246 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
Dahua — Dahua IP Camera Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 247 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dahua
- Source
- CISA KEV
SaltStack — SaltStack Salt Shell Injection Vulnerability
EVRS 87 Immediate
Rank 248 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SaltStack
- Source
- CISA KEV
CrushFTP — CrushFTP VFS Sandbox Escape Vulnerability
EVRS 87 Immediate
Rank 249 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.5% 99.95th percentile
- In CISA KEV since
- 2024-04-24
- CISA deadline
- 2024-05-01 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- CrushFTP
- Source
- CISA KEV
ThinkPHP — ThinkPHP "noneCms" Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 250 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.5% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ThinkPHP
- Source
- CISA KEV
