Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Ranked by EVRS

455 match · filtered from 2,960

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 301 to 325
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
301 CVE-2023-27351PaperCut — PaperCut NG/MF Improper Authentication VulnerabilityRansomwareCISA federal deadline · Overdue by 6 months 87 7.5 78.1% · 99.58th 2026-04-20 2026-05-04CISA federal deadline · Overdue by 6 months
302 CVE-2026-93616Check Point — Check Point Multiple Products Path Traversal VulnerabilityCISA federal deadline · Overdue by 27 days 87 9.8 75.9% · 99.53rd 2026-09-22 2026-09-25CISA federal deadline · Overdue by 27 days
303 CVE-2021-42258BQE — BQE BillQuick Web Suite SQL Injection VulnerabilityRansomwareExigentKEV since 2021 · listed over a year 87 9.8 74.4% · 99.49th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
304 CVE-2023-1389TP-Link — TP-Link Archer AX-21 Command Injection VulnerabilityKEV since 2023 · listed over a year 86 8.8 100.0% · 99.99th 2023-05-01 2023-05-22KEV since 2023 · listed over a year
305 CVE-2023-4863Google — Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityKEV since 2023 · listed over a year 86 8.8 100.0% · 99.98th 2023-09-13 2023-10-04KEV since 2023 · listed over a year
306 CVE-2024-4879ServiceNow — ServiceNow Improper Input Validation VulnerabilityExigentKEV since 2024 · listed over a year 86 9.3 100.0% · 99.98th 2024-07-29 2024-08-19KEV since 2024 · listed over a year
307 CVE-2024-29824Ivanti — Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityKEV since 2024 · listed over a year 86 8.8 99.9% · 99.97th 2024-10-02 2024-10-23KEV since 2024 · listed over a year
308 CVE-2016-6277NETGEAR — NETGEAR Multiple Routers Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.8% · 99.96th 2022-03-07 2022-09-07KEV since 2022 · listed over a year
309 CVE-2024-5217ServiceNow — ServiceNow Incomplete List of Disallowed Inputs VulnerabilityExigentKEV since 2024 · listed over a year 86 9.2 99.6% · 99.95th 2024-07-29 2024-08-19KEV since 2024 · listed over a year
310 CVE-2011-0611Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.4% · 99.94th 2022-03-03 2022-03-24KEV since 2022 · listed over a year
311 CVE-2020-11978Apache — Apache Airflow Command InjectionKEV since 2022 · listed over a year 86 8.8 99.2% · 99.94th 2022-01-18 2022-07-18KEV since 2022 · listed over a year
312 CVE-2022-36804Atlassian — Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.2% · 99.94th 2022-09-30 2022-10-21KEV since 2022 · listed over a year
313 CVE-2012-3152Oracle — Oracle Fusion Middleware Unspecified VulnerabilityExigentKEV since 2021 · listed over a year 86 9.1 98.8% · 99.93rd 2021-11-03 2022-05-03KEV since 2021 · listed over a year
314 CVE-2024-8963Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityExigentKEV since 2024 · listed over a year 86 9.1 98.6% · 99.92nd 2024-09-19 2024-10-10KEV since 2024 · listed over a year
315 CVE-2025-0108Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEV since 2025 · listed over a year 86 8.8 98.5% · 99.92nd 2025-02-18 2025-03-11KEV since 2025 · listed over a year
316 CVE-2023-25280D-Link — D-Link DIR-820 Router OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.9% · 99.91st 2024-09-30 2024-10-21KEV since 2024 · listed over a year
317 CVE-2021-45382D-Link — D-Link Multiple Routers Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 86 9.8 97.8% · 99.91st 2022-04-04 2022-04-25KEV since 2022 · listed over a year
318 CVE-2021-36380Sunhillo — Sunhillo SureLine OS Command Injection VulnerablityExigentKEV since 2024 · listed over a year 86 9.8 97.8% · 99.91st 2024-03-05 2024-03-26KEV since 2024 · listed over a year
319 CVE-2015-7450IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.ExigentKEV since 2022 · listed over a year 86 9.8 97.8% · 99.91st 2022-01-10 2022-07-10KEV since 2022 · listed over a year
320 CVE-2024-4358Progress — Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.5% · 99.9th 2024-06-13 2024-07-04KEV since 2024 · listed over a year
321 CVE-2023-27524Apache — Apache Superset Insecure Default Initialization of Resource VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.4% · 99.9th 2024-01-08 2024-01-29KEV since 2024 · listed over a year
322 CVE-2007-3010Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 86 9.8 97.4% · 99.9th 2022-04-15 2022-05-06KEV since 2022 · listed over a year
323 CVE-2023-24489Citrix — Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityExigentKEV since 2023 · listed over a year 86 9.8 97.3% · 99.9th 2023-08-16 2023-09-06KEV since 2023 · listed over a year
324 CVE-2020-25213WordPress — WordPress File Manager Plugin Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 86 9.8 97.3% · 99.9th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
325 CVE-2020-2555Oracle — Oracle Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 86 9.8 97.1% · 99.89th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
Showing 301–325 of 455

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics