Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 376 | CVE-2015-2051D-Link — D-Link DIR-645 Router Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 97.1% · 99.89th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 377 | CVE-2019-3398Atlassian — Atlassian Confluence Server and Data Center Path Traversal VulnerabilityKEV since 2021 · listed over a year | 85 | 8.8 | 97.0% · 99.89th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.970. | |||||||
| 378 | CVE-2009-0927Adobe — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 96.6% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.966. | |||||||
| 379 | CVE-2018-14847MikroTik — MikroTik Router OS Directory Traversal VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.1 | 96.0% · 99.88th | 2021-12-01 | 2022-06-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.960. | |||||||
| 380 | CVE-2024-48248NAKIVO — NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 85 | 8.6 | 94.4% · 99.85th | 2025-03-19 | 2025-04-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.944. | |||||||
| 381 | CVE-2017-1000486Primetek — Primetek Primefaces Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 94.1% · 99.85th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.941. | |||||||
| 382 | CVE-2015-5122Adobe — Adobe Flash Player Use-After-Free VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.9% · 99.85th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
| 383 | CVE-2013-0625Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.8% · 99.84th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.938. | |||||||
| 384 | CVE-2013-0632Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.6% · 99.84th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.936. | |||||||
| 385 | CVE-2025-4008Smartbedded — Smartbedded Meteobridge Command Injection VulnerabilityKEV since 2025 · listed over a year | 85 | 8.7 | 93.3% · 99.84th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 386 | CVE-2024-28987SolarWinds — SolarWinds Web Help Desk Hardcoded Credential VulnerabilityExigentKEV since 2024 · listed over a year | 85 | 9.1 | 93.3% · 99.84th | 2024-10-15 | 2024-11-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 387 | CVE-2021-44077Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 93.3% · 99.84th | 2021-12-01 | 2021-12-15KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 388 | CVE-2016-4437Apache — Apache Shiro Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 93.0% · 99.83rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 389 | CVE-2021-40870Aviatrix — Aviatrix Controller Unrestricted Upload of FileExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.0% · 99.83rd | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 390 | CVE-2018-10561Dasan — Dasan GPON Routers Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 391 | CVE-2020-2551Oracle — Oracle Fusion Middleware Unspecified VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2023-11-16 | 2023-12-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 392 | CVE-2022-24706Apache — Apache CouchDB Insecure Default Initialization of Resource VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.5% · 99.83rd | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.925. | |||||||
| 393 | CVE-2016-3427Oracle — Oracle Java SE and JRockit Unspecified VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 92.3% · 99.83rd | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.923. | |||||||
| 394 | CVE-2017-5689Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.2% · 99.82nd | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.922. | |||||||
| 395 | CVE-2025-11371Gladinet — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityCISA federal deadline · Overdue by 11 months | 85 | 7.5 | 92.1% · 99.82nd | 2025-11-04 | 2025-11-25CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.921. | |||||||
| 396 | CVE-2020-10148SolarWinds — SolarWinds Orion Authentication Bypass VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 92.0% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 397 | CVE-2020-8657EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 91.9% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.919. | |||||||
| 398 | CVE-2024-5910Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication VulnerabilityExigentKEV since 2024 · listed over a year | 85 | 9.3 | 91.7% · 99.82nd | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.917. | |||||||
| 399 | CVE-2022-26258D-Link — D-Link DIR-820L Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 91.6% · 99.81st | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.916. | |||||||
| 400 | CVE-2012-5076Oracle — Oracle Java SE Sandbox Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 91.2% · 99.81st | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.912. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsD-Link — D-Link DIR-645 Router Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 376 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Atlassian — Atlassian Confluence Server and Data Center Path Traversal Vulnerability
EVRS 85 Immediate
Rank 377 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
Adobe — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
EVRS 85 Immediate
Rank 378 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 96.6% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
MikroTik — MikroTik Router OS Directory Traversal Vulnerability
EVRS 85 Immediate
Rank 379 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2022-06-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
NAKIVO — NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
EVRS 85 Immediate
Rank 380 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 94.4% 99.85th percentile
- In CISA KEV since
- 2025-03-19
- CISA deadline
- 2025-04-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- NAKIVO
- Source
- CISA KEV
Primetek — Primetek Primefaces Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 381 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.1% 99.85th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Primetek
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 382 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 383 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.8% 99.84th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 384 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.6% 99.84th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Smartbedded — Smartbedded Meteobridge Command Injection Vulnerability
EVRS 85 Immediate
Rank 385 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.7 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Smartbedded
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Hardcoded Credential Vulnerability
EVRS 85 Immediate
Rank 386 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2024-10-15
- CISA deadline
- 2024-11-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 387 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2021-12-15 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Apache — Apache Shiro Code Execution Vulnerability
EVRS 85 Immediate
Rank 388 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Aviatrix — Aviatrix Controller Unrestricted Upload of File
EVRS 85 Immediate
Rank 389 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Aviatrix
- Source
- CISA KEV
Dasan — Dasan GPON Routers Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 390 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dasan
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 85 Immediate
Rank 391 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2023-11-16
- CISA deadline
- 2023-12-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache CouchDB Insecure Default Initialization of Resource Vulnerability
EVRS 85 Immediate
Rank 392 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.5% 99.83rd percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle Java SE and JRockit Unspecified Vulnerability
EVRS 85 Immediate
Rank 393 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.3% 99.83rd percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
EVRS 85 Immediate
Rank 394 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.2% 99.82nd percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Intel
- Source
- CISA KEV
Gladinet — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
EVRS 85 Immediate
Rank 395 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 92.1% 99.82nd percentile
- In CISA KEV since
- 2025-11-04
- CISA deadline
- 2025-11-25 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
SolarWinds — SolarWinds Orion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 396 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
EVRS 85 Immediate
Rank 397 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- EyesOfNetwork
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication Vulnerability
EVRS 85 Immediate
Rank 398 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.7% 99.82nd percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
D-Link — D-Link DIR-820L Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 399 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.6% 99.81st percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Oracle — Oracle Java SE Sandbox Bypass Vulnerability
EVRS 85 Immediate
Rank 400 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.2% 99.81st percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
