Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
455 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 201 | CVE-2013-2251Apache — Apache Struts Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 202 | CVE-2020-14882Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 203 | CVE-2019-16920D-Link — D-Link Multiple Routers Command Injection VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 204 | CVE-2022-44877CWP — CWP Control Web Panel OS Command Injection VulnerabilityKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2023-01-17 | 2023-02-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 205 | CVE-2024-3273D-Link — D-Link Multiple NAS Devices Command Injection VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-04-11 | 2024-05-02KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 206 | CVE-2024-34102Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 207 | CVE-2020-8515DrayTek — Multiple DrayTek Vigor Routers Web Management Page VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 208 | CVE-2021-33044Dahua — Dahua IP Camera Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 209 | CVE-2020-9054Zyxel — Zyxel Multiple NAS Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 210 | CVE-2019-9670Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 211 | CVE-2021-20090Arcadyan — Arcadyan Buffalo Firmware Path Traversal VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 212 | CVE-2014-8361Realtek — Realtek SDK Improper Input Validation VulnerabilityKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 213 | CVE-2020-25506D-Link — D-Link DNS-320 Device Command Injection VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 214 | CVE-2019-10149Exim — Exim Mail Transfer Agent (MTA) Improper Input ValidationKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 215 | CVE-2018-2628Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 216 | CVE-2024-38475Apache — Apache HTTP Server Improper Escaping of Output VulnerabilityKEV since 2025 · listed over a year | 87 | 9.1 | 100.0% · 99.98th | 2025-05-01 | 2025-05-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 217 | CVE-2018-15961Adobe — Adobe ColdFusion Unrestricted File Upload VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 218 | CVE-2022-30525Zyxel — Zyxel Multiple Firewalls OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-05-16 | 2022-06-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 219 | CVE-2020-10189Zoho — Zoho ManageEngine Desktop Central File Upload VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 220 | CVE-2014-7169GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 221 | CVE-2022-22963VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 222 | CVE-2021-1497Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 223 | CVE-2022-35405Zoho — Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-09-22 | 2022-10-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 224 | CVE-2024-32113Apache — Apache OFBiz Path Traversal VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-08-07 | 2024-08-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 225 | CVE-2022-24816OSGeo — OSGeo GeoServer JAI-EXT Code Injection VulnerabilityKEV since 2024 · listed over a year | 87 | 10.0 | 99.9% · 99.97th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApache — Apache Struts Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 201 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 202 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
D-Link — D-Link Multiple Routers Command Injection Vulnerability
EVRS 87 Immediate
Rank 203 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
CWP — CWP Control Web Panel OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 204 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-01-17
- CISA deadline
- 2023-02-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- CWP
- Source
- CISA KEV
D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability
EVRS 87 Immediate
Rank 205 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-04-11
- CISA deadline
- 2024-05-02 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
EVRS 87 Immediate
Rank 206 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
DrayTek — Multiple DrayTek Vigor Routers Web Management Page Vulnerability
EVRS 87 Immediate
Rank 207 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Dahua — Dahua IP Camera Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 208 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dahua
- Source
- CISA KEV
Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 209 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
EVRS 87 Immediate
Rank 210 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Arcadyan — Arcadyan Buffalo Firmware Path Traversal Vulnerability
EVRS 87 Immediate
Rank 211 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arcadyan
- Source
- CISA KEV
Realtek — Realtek SDK Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 212 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
D-Link — D-Link DNS-320 Device Command Injection Vulnerability
EVRS 87 Immediate
Rank 213 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Exim — Exim Mail Transfer Agent (MTA) Improper Input Validation
EVRS 87 Immediate
Rank 214 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Exim
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 87 Immediate
Rank 215 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache HTTP Server Improper Escaping of Output Vulnerability
EVRS 87 Immediate
Rank 216 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.1 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2025-05-01
- CISA deadline
- 2025-05-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe ColdFusion Unrestricted File Upload Vulnerability
EVRS 87 Immediate
Rank 217 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 218 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-05-16
- CISA deadline
- 2022-06-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Zoho — Zoho ManageEngine Desktop Central File Upload Vulnerability
EVRS 87 Immediate
Rank 219 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
EVRS 87 Immediate
Rank 220 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 221 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
EVRS 87 Immediate
Rank 222 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 223 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-09-22
- CISA deadline
- 2022-10-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Apache — Apache OFBiz Path Traversal Vulnerability
EVRS 87 Immediate
Rank 224 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-08-07
- CISA deadline
- 2024-08-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
OSGeo — OSGeo GeoServer JAI-EXT Code Injection Vulnerability
EVRS 87 Immediate
Rank 225 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-06-26
- CISA deadline
- 2024-07-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- OSGeo
- Source
- CISA KEV
