Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 326 | CVE-2019-7256Nice — Nice Linear eMerge E3-Series OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 97.1% · 99.89th | 2024-03-25 | 2024-04-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 327 | CVE-2019-1003030Jenkins — Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.9 | 97.1% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 328 | CVE-2025-5086Dassault Systèmes — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 86 | 9.0 | 96.9% · 99.89th | 2025-09-11 | 2025-10-02KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 329 | CVE-2020-25223Sophos — Sophos SG UTM Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.8% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.968. | |||||||
| 330 | CVE-2021-22502Micro Focus — Micro Focus Operation Bridge Report (OBR) Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 96.7% · 99.89th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.967. | |||||||
| 331 | CVE-2011-3544Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.7% · 99.89th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.967. | |||||||
| 332 | CVE-2020-11651SaltStack — SaltStack Salt Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 96.6% · 99.89th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.966. | |||||||
| 333 | CVE-2023-33246Apache — Apache RocketMQ Command Execution VulnerabilityKEV since 2023 · listed over a year | 86 | 9.8 | 96.6% · 99.88th | 2023-09-06 | 2023-09-27KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.966. | |||||||
| 334 | CVE-2009-1151phpMyAdmin — phpMyAdmin Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.6% · 99.88th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.966. | |||||||
| 335 | CVE-2010-0840Oracle — Oracle JRE Unspecified VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.3% · 99.88th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 336 | CVE-2021-35587Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.3% · 99.88th | 2022-11-28 | 2022-12-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 337 | CVE-2022-24112Apache — Apache APISIX Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.1% · 99.88th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.961. | |||||||
| 338 | CVE-2020-17530Apache — Apache Struts Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 95.9% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.959. | |||||||
| 339 | CVE-2020-5847Unraid — Unraid Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 95.8% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.958. | |||||||
| 340 | CVE-2022-23131Zabbix — Zabbix Frontend Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 95.7% · 99.87th | 2022-02-22 | 2022-03-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.957. | |||||||
| 341 | CVE-2019-7609Elastic — Kibana Arbitrary Code ExecutionKEV since 2022 · listed over a year | 86 | 10.0 | 95.3% · 99.87th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.953. | |||||||
| 342 | CVE-2015-0313Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 95.3% · 99.87th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.953. | |||||||
| 343 | CVE-2019-10068Kentico — Kentico Xperience Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 95.1% · 99.87th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.951. | |||||||
| 344 | CVE-2023-36845Juniper — Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityKEV since 2023 · listed over a year | 86 | 9.8 | 95.1% · 99.87th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.951. | |||||||
| 345 | CVE-2015-4852Oracle — Oracle WebLogic Server Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 95.0% · 99.86th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.950. | |||||||
| 346 | CVE-2019-12989Citrix — Citrix SD-WAN and NetScaler SQL Injection VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 94.9% · 99.86th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.949. | |||||||
| 347 | CVE-2020-6287SAP — SAP NetWeaver Missing Authentication for Critical Function VulnerabilityKEV since 2021 · listed over a year | 86 | 10.0 | 94.7% · 99.86th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.947. | |||||||
| 348 | CVE-2020-14644Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 94.5% · 99.86th | 2024-09-18 | 2024-10-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.945. | |||||||
| 349 | CVE-2017-18368Zyxel — Zyxel P660HN-T1A Routers Command Injection VulnerabilityKEV since 2023 · listed over a year | 86 | 9.8 | 94.5% · 99.86th | 2023-08-07 | 2023-08-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.945. | |||||||
| 350 | CVE-2023-7028GitLab — GitLab Community and Enterprise Editions Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 94.5% · 99.85th | 2024-05-01 | 2024-05-22KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.945. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsNice — Nice Linear eMerge E3-Series OS Command Injection Vulnerability
EVRS 86 Immediate
Rank 326 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2024-03-25
- CISA deadline
- 2024-04-15 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nice
- Source
- CISA KEV
Jenkins — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 327 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.9 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
Dassault Systèmes — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
EVRS 86 Immediate
Rank 328 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.0 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2025-09-11
- CISA deadline
- 2025-10-02 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dassault Systèmes
- Source
- CISA KEV
Sophos — Sophos SG UTM Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 329 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.8% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Micro Focus — Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 330 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Micro Focus
- Source
- CISA KEV
Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
EVRS 86 Immediate
Rank 331 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
SaltStack — SaltStack Salt Authentication Bypass Vulnerability
EVRS 86 Immediate
Rank 332 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.6% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SaltStack
- Source
- CISA KEV
Apache — Apache RocketMQ Command Execution Vulnerability
EVRS 86 Immediate
Rank 333 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.6% 99.88th percentile
- In CISA KEV since
- 2023-09-06
- CISA deadline
- 2023-09-27 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
phpMyAdmin — phpMyAdmin Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 334 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.6% 99.88th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- phpMyAdmin
- Source
- CISA KEV
Oracle — Oracle JRE Unspecified Vulnerability
EVRS 86 Immediate
Rank 335 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 86 Immediate
Rank 336 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2022-11-28
- CISA deadline
- 2022-12-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache APISIX Authentication Bypass Vulnerability
EVRS 86 Immediate
Rank 337 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.1% 99.88th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Apache — Apache Struts Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 338 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.9% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Unraid — Unraid Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 339 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.8% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Unraid
- Source
- CISA KEV
Zabbix — Zabbix Frontend Authentication Bypass Vulnerability
EVRS 86 Immediate
Rank 340 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.7% 99.87th percentile
- In CISA KEV since
- 2022-02-22
- CISA deadline
- 2022-03-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zabbix
- Source
- CISA KEV
Elastic — Kibana Arbitrary Code Execution
EVRS 86 Immediate
Rank 341 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Elastic
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 86 Immediate
Rank 342 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Kentico — Kentico Xperience Deserialization of Untrusted Data Vulnerability
EVRS 86 Immediate
Rank 343 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.1% 99.87th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
Juniper — Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
EVRS 86 Immediate
Rank 344 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.1% 99.87th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
EVRS 86 Immediate
Rank 345 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.0% 99.86th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Citrix — Citrix SD-WAN and NetScaler SQL Injection Vulnerability
EVRS 86 Immediate
Rank 346 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.9% 99.86th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
SAP — SAP NetWeaver Missing Authentication for Critical Function Vulnerability
EVRS 86 Immediate
Rank 347 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 94.7% 99.86th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 348 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.5% 99.86th percentile
- In CISA KEV since
- 2024-09-18
- CISA deadline
- 2024-10-09 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Zyxel — Zyxel P660HN-T1A Routers Command Injection Vulnerability
EVRS 86 Immediate
Rank 349 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.5% 99.86th percentile
- In CISA KEV since
- 2023-08-07
- CISA deadline
- 2023-08-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
GitLab — GitLab Community and Enterprise Editions Improper Access Control Vulnerability
EVRS 86 Immediate
Rank 350 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.5% 99.85th percentile
- In CISA KEV since
- 2024-05-01
- CISA deadline
- 2024-05-22 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- GitLab
- Source
- CISA KEV
