Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 26 | CVE-2023-27350PaperCut — PaperCut MF/NG Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2023-04-21 | 2023-05-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 27 | CVE-2023-35078Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2023-07-25 | 2023-08-15KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 28 | CVE-2023-35082Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2024-01-18 | 2024-02-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 29 | CVE-2024-23897Jenkins — Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2024-08-19 | 2024-09-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 30 | CVE-2024-3400Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 94 | 10.0 | 100.0% · 99.99th | 2024-04-12 | 2024-04-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 31 | CVE-2022-22954VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityKEV since 2022 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2022-04-14 | 2022-05-05KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 32 | CVE-2021-41773Apache — Apache HTTP Server Path Traversal VulnerabilityKEV since 2021 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 33 | CVE-2018-7600Drupal — Drupal Core Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 34 | CVE-2023-29300Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 100.0% · 99.99th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 35 | CVE-2023-42793JetBrains — JetBrains TeamCity Authentication Bypass VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2023-10-04 | 2023-10-25KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 36 | CVE-2024-4577PHP Group — PHP-CGI OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2024-06-12 | 2024-07-03KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 37 | CVE-2022-40684Fortinet — Fortinet Multiple Products Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2022-10-11 | 2022-11-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 38 | CVE-2023-22527Atlassian — Atlassian Confluence Data Center and Server Template Injection VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2024-01-24 | 2024-02-14KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 39 | CVE-2025-0282Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 94 | 9.0 | 100.0% · 99.98th | 2025-01-08 | 2025-01-15KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 40 | CVE-2024-1709ConnectWise — ConnectWise ScreenConnect Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 94 | 10.0 | 100.0% · 99.98th | 2024-02-22 | 2024-02-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 41 | CVE-2019-2725Oracle — Oracle WebLogic Server, InjectionKEV since 2022 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 42 | CVE-2025-5777Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityKEV since 2025 · listed over a year | 94 | 9.3 | 100.0% · 99.98th | 2025-07-10 | 2025-07-11KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 43 | CVE-2022-47986IBM — IBM Aspera Faspex Code Execution VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 44 | CVE-2021-42013Apache — Apache HTTP Server Path Traversal VulnerabilityKEV since 2021 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 45 | CVE-2022-1388F5 — F5 BIG-IP Missing Authentication VulnerabilityKEV since 2022 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2022-05-10 | 2022-05-31KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 46 | CVE-2023-38035Ivanti — Ivanti Sentry Authentication Bypass VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 100.0% · 99.98th | 2023-08-22 | 2023-09-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 47 | CVE-2018-10562Dasan — Dasan GPON Routers Command Injection VulnerabilityKEV since 2022 · listed over a year | 94 | 9.8 | 99.9% · 99.97th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 48 | CVE-2021-3129Laravel — Laravel Ignition File Upload VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 99.9% · 99.97th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 49 | CVE-2024-27198JetBrains — JetBrains TeamCity Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 94 | 9.8 | 99.9% · 99.97th | 2024-03-07 | 2024-03-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 50 | CVE-2023-34362Progress — Progress MOVEit Transfer SQL Injection VulnerabilityKEV since 2023 · listed over a year | 94 | 9.8 | 99.9% · 99.97th | 2023-06-02 | 2023-06-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsPaperCut — PaperCut MF/NG Improper Access Control Vulnerability
EVRS 94 Immediate
Rank 26 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-04-21
- CISA deadline
- 2023-05-12 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- PaperCut
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 27 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-07-25
- CISA deadline
- 2023-08-15 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 28 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-01-18
- CISA deadline
- 2024-02-08 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Jenkins — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
EVRS 94 Immediate
Rank 29 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-08-19
- CISA deadline
- 2024-09-09 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Jenkins
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection Vulnerability
EVRS 94 Immediate
Rank 30 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-04-12
- CISA deadline
- 2024-04-19 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
EVRS 94 Immediate
Rank 31 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-04-14
- CISA deadline
- 2022-05-05 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
Apache — Apache HTTP Server Path Traversal Vulnerability
EVRS 94 Immediate
Rank 32 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Apache
- Source
- CISA KEV
Drupal — Drupal Core Remote Code Execution Vulnerability
EVRS 94 Immediate
Rank 33 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Drupal
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 94 Immediate
Rank 34 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 35 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-10-04
- CISA deadline
- 2023-10-25 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- JetBrains
- Source
- CISA KEV
PHP Group — PHP-CGI OS Command Injection Vulnerability
EVRS 94 Immediate
Rank 36 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-06-12
- CISA deadline
- 2024-07-03 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- PHP Group
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 37 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-10-11
- CISA deadline
- 2022-11-01 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Atlassian — Atlassian Confluence Data Center and Server Template Injection Vulnerability
EVRS 94 Immediate
Rank 38 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-01-24
- CISA deadline
- 2024-02-14 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Atlassian
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
EVRS 94 Immediate
Rank 39 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.0 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2025-01-08
- CISA deadline
- 2025-01-15 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
ConnectWise — ConnectWise ScreenConnect Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 40 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 10.0 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-02-22
- CISA deadline
- 2024-02-29 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- ConnectWise
- Source
- CISA KEV
Oracle — Oracle WebLogic Server, Injection
EVRS 94 Immediate
Rank 41 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
EVRS 94 Immediate
Rank 42 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.3 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2025-07-10
- CISA deadline
- 2025-07-11 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
IBM — IBM Aspera Faspex Code Execution Vulnerability
EVRS 94 Immediate
Rank 43 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-02-21
- CISA deadline
- 2023-03-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- IBM
- Source
- CISA KEV
Apache — Apache HTTP Server Path Traversal Vulnerability
EVRS 94 Immediate
Rank 44 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Apache
- Source
- CISA KEV
F5 — F5 BIG-IP Missing Authentication Vulnerability
EVRS 94 Immediate
Rank 45 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-05-10
- CISA deadline
- 2022-05-31 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- F5
- Source
- CISA KEV
Ivanti — Ivanti Sentry Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 46 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-08-22
- CISA deadline
- 2023-09-12 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Dasan — Dasan GPON Routers Command Injection Vulnerability
EVRS 94 Immediate
Rank 47 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Dasan
- Source
- CISA KEV
Laravel — Laravel Ignition File Upload Vulnerability
EVRS 94 Immediate
Rank 48 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Laravel
- Source
- CISA KEV
JetBrains — JetBrains TeamCity Authentication Bypass Vulnerability
EVRS 94 Immediate
Rank 49 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-03-07
- CISA deadline
- 2024-03-28 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- JetBrains
- Source
- CISA KEV
Progress — Progress MOVEit Transfer SQL Injection Vulnerability
EVRS 94 Immediate
Rank 50 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2023-06-02
- CISA deadline
- 2023-06-23 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Progress
- Source
- CISA KEV
