Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 76 | CVE-2021-44529Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 99.1% · 99.93rd | 2024-03-25 | 2024-04-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 77 | CVE-2021-40539Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityExigentKEV since 2021 · listed over a year | 93 | 9.8 | 99.0% · 99.93rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 78 | CVE-2023-47246SysAid — SysAid Server Path Traversal VulnerabilityExigentKEV since 2023 · listed over a year | 93 | 9.8 | 98.9% · 99.93rd | 2023-11-13 | 2023-12-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 79 | CVE-2013-2465Oracle — Oracle Java SE Unspecified VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 98.8% · 99.93rd | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 80 | CVE-2012-4681Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 98.5% · 99.92nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 81 | CVE-2023-48788Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 98.4% · 99.92nd | 2024-03-25 | 2024-04-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 82 | CVE-2022-21587Oracle — Oracle E-Business Suite Unspecified VulnerabilityExigentKEV since 2023 · listed over a year | 93 | 9.8 | 98.3% · 99.92nd | 2023-02-02 | 2023-02-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 83 | CVE-2012-0507Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 98.2% · 99.91st | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 84 | CVE-2019-5544VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityExigentKEV since 2021 · listed over a year | 93 | 9.8 | 98.1% · 99.91st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 85 | CVE-2021-42237Sitecore — Sitecore XP Remote Command Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.6% · 99.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 86 | CVE-2024-41713Mitel — Mitel MiCollab Path Traversal VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.1 | 97.2% · 99.9th | 2025-01-07 | 2025-01-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 87 | CVE-2023-38203Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 97.1% · 99.89th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 88 | CVE-2013-0422Oracle — Oracle JRE Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.0% · 99.89th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 89 | CVE-2018-1273VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.0% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 90 | CVE-2026-0257Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 5 months | 93 | 7.8 | 96.9% · 99.89th | 2026-05-29 | 2026-06-01CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 91 | CVE-2018-6530D-Link — D-Link Multiple Routers OS Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 96.7% · 99.89th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 92 | CVE-2023-46747F5 — F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityExigentKEV since 2023 · listed over a year | 93 | 9.8 | 96.5% · 99.88th | 2023-10-31 | 2023-11-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 93 | CVE-2022-41352Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 95.5% · 99.87th | 2022-10-20 | 2022-11-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 94 | CVE-2024-1708ConnectWise — ConnectWise ScreenConnect Path Traversal VulnerabilityCISA federal deadline · Overdue by 5 months | 93 | 8.4 | 95.4% · 99.87th | 2026-04-28 | 2026-05-12CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 95 | CVE-2024-53704SonicWall — SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.8 | 95.3% · 99.87th | 2025-02-18 | 2025-03-11KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 96 | CVE-2024-51378CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 94.7% · 99.86th | 2024-12-04 | 2024-12-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 97 | CVE-2024-55591Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.8 | 94.3% · 99.85th | 2025-01-14 | 2025-01-21KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 98 | CVE-2024-55956Cleo — Cleo Multiple Products Unauthenticated File Upload VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 94.0% · 99.85th | 2024-12-17 | 2025-01-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 99 | CVE-2026-24423SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 93 | 9.3 | 88.2% · 99.77th | 2026-02-05 | 2026-02-26CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 100 | CVE-2025-52691SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityExigentCISA federal deadline · Overdue by 8 months | 93 | 10.0 | 85.7% · 99.73rd | 2026-01-26 | 2026-02-16CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsIvanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
EVRS 93 Immediate
Rank 76 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.1% 99.93rd percentile
- In CISA KEV since
- 2024-03-25
- CISA deadline
- 2024-04-15 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 77 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Zoho
- Source
- CISA KEV
SysAid — SysAid Server Path Traversal Vulnerability
EVRS 93 Immediate
Rank 78 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.9% 99.93rd percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-12-04 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- SysAid
- Source
- CISA KEV
Oracle — Oracle Java SE Unspecified Vulnerability
EVRS 93 Immediate
Rank 79 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.8% 99.93rd percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
EVRS 93 Immediate
Rank 80 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Fortinet — Fortinet FortiClient EMS SQL Injection Vulnerability
EVRS 93 Immediate
Rank 81 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.4% 99.92nd percentile
- In CISA KEV since
- 2024-03-25
- CISA deadline
- 2024-04-15 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Oracle — Oracle E-Business Suite Unspecified Vulnerability
EVRS 93 Immediate
Rank 82 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.3% 99.92nd percentile
- In CISA KEV since
- 2023-02-02
- CISA deadline
- 2023-02-23 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
EVRS 93 Immediate
Rank 83 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.2% 99.91st percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
EVRS 93 Immediate
Rank 84 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 98.1% 99.91st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
Sitecore — Sitecore XP Remote Command Execution Vulnerability
EVRS 93 Immediate
Rank 85 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.6% 99.9th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Sitecore
- Source
- CISA KEV
Mitel — Mitel MiCollab Path Traversal Vulnerability
EVRS 93 Immediate
Rank 86 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 97.2% 99.9th percentile
- In CISA KEV since
- 2025-01-07
- CISA deadline
- 2025-01-28 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 93 Immediate
Rank 87 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle JRE Remote Code Execution Vulnerability
EVRS 93 Immediate
Rank 88 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability
EVRS 93 Immediate
Rank 89 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 90 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2026-05-29
- CISA deadline
- 2026-06-01 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
D-Link — D-Link Multiple Routers OS Command Injection Vulnerability
EVRS 93 Immediate
Rank 91 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- D-Link
- Source
- CISA KEV
F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 92 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.5% 99.88th percentile
- In CISA KEV since
- 2023-10-31
- CISA deadline
- 2023-11-21 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- F5
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
EVRS 93 Immediate
Rank 93 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.5% 99.87th percentile
- In CISA KEV since
- 2022-10-20
- CISA deadline
- 2022-11-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
ConnectWise — ConnectWise ScreenConnect Path Traversal Vulnerability
EVRS 93 Immediate
Rank 94 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 95.4% 99.87th percentile
- In CISA KEV since
- 2026-04-28
- CISA deadline
- 2026-05-12 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Known
- Vendor
- ConnectWise
- Source
- CISA KEV
SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
EVRS 93 Immediate
Rank 95 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2025-02-18
- CISA deadline
- 2025-03-11 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability
EVRS 93 Immediate
Rank 96 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.7% 99.86th percentile
- In CISA KEV since
- 2024-12-04
- CISA deadline
- 2024-12-25 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- CyberPersons
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 97 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.3% 99.85th percentile
- In CISA KEV since
- 2025-01-14
- CISA deadline
- 2025-01-21 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability
EVRS 93 Immediate
Rank 98 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.85th percentile
- In CISA KEV since
- 2024-12-17
- CISA deadline
- 2025-01-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Cleo
- Source
- CISA KEV
SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability
EVRS 93 Immediate
Rank 99 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2026-02-05
- CISA deadline
- 2026-02-26 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Known
- Vendor
- SmarterTools
- Source
- CISA KEV
SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 93 Immediate
Rank 100 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 85.7% 99.73rd percentile
- In CISA KEV since
- 2026-01-26
- CISA deadline
- 2026-02-16 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Known
- Vendor
- SmarterTools
- Source
- CISA KEV
