Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 226 | CVE-2019-11708Mozilla — Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityKEV since 2022 · listed over a year | 76 | 10.0 | 55.9% · 99.05th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.559. | |||||||
| 227 | CVE-2026-2441Google — Google Chromium CSS Use-After-Free VulnerabilityCISA federal deadline · Overdue by 7 months | 76 | 8.8 | 55.0% · 99.03rd | 2026-02-17 | 2026-03-10CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.550. | |||||||
| 228 | CVE-2024-38812VMware — VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 76 | 9.8 | 54.6% · 99.02nd | 2024-11-20 | 2024-12-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.546. | |||||||
| 229 | CVE-2026-85046Google — Google Chromium V8 Type Confusion VulnerabilityCISA federal deadline · Overdue by 34 days | 76 | 8.8 | 48.9% · 98.9th | 2026-09-04 | 2026-09-18CISA federal deadline · Overdue by 34 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 230 | CVE-2026-39808Fortinet — Fortinet FortiSandbox OS Command Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 76 | 9.8 | 47.4% · 98.8th | 2026-07-16 | 2026-07-19CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.474. | |||||||
| 231 | CVE-2026-34910Ubiquiti — Ubiquiti UniFi OS Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 4 months | 76 | 10.0 | 45.8% · 98.8th | 2026-06-23 | 2026-06-26CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.458. | |||||||
| 232 | CVE-2023-49105ownCloud — ownCloud Improper Authentication VulnerabilityCISA federal deadline · Overdue by 53 days | 76 | 9.8 | 43.2% · 98.7th | 2026-08-27 | 2026-08-30CISA federal deadline · Overdue by 53 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.432. | |||||||
| 233 | CVE-2026-105134Ahsay — Ahsay AhsayCBS Command Injection VulnerabilityCISA federal deadline · Overdue by 5 days | 76 | 9.3 | 38.3% · 98.6th | 2026-10-14 | 2026-10-17CISA federal deadline · Overdue by 5 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.383. | |||||||
| 234 | CVE-2013-2423Oracle — Oracle JRE Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 3.7 | 85.2% · 99.72nd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.852. | |||||||
| 235 | CVE-2023-5631Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 5.4 | 76.9% · 99.55th | 2023-10-26 | 2023-11-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.769. | |||||||
| 236 | CVE-2016-3718ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 75.6% · 99.52nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.756. | |||||||
| 237 | CVE-2016-3715ImageMagick — ImageMagick Arbitrary File Deletion VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 75.3% · 99.51st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.753. | |||||||
| 238 | CVE-2019-9978WordPress — WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 72.9% · 99.45th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.729. | |||||||
| 239 | CVE-2022-28810Zoho — Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 6.8 | 71.0% · 99.4th | 2023-03-07 | 2023-03-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.710. | |||||||
| 240 | CVE-2016-11021D-Link — D-Link DCS-930L Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 68.9% · 99.35th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.689. | |||||||
| 241 | CVE-2020-4430IBM — IBM Data Risk Manager Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 68.5% · 99.34th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.685. | |||||||
| 242 | CVE-2021-30657Apple — Apple macOS Unspecified VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 68.5% · 99.34th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.685. | |||||||
| 243 | CVE-2013-0631Adobe — Adobe ColdFusion Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 66.4% · 99.28th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.664. | |||||||
| 244 | CVE-2013-0629Adobe — Adobe ColdFusion Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 65.8% · 99.27th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.658. | |||||||
| 245 | CVE-2019-0211Apache — Apache HTTP Server Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 65.0% · 99.25th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.650. | |||||||
| 246 | CVE-2023-29552IETF — Service Location Protocol (SLP) Denial-of-Service VulnerabilityKEV since 2023 · listed over a year | 75 | 7.5 | 64.0% · 99.22nd | 2023-11-08 | 2023-11-29KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.640. | |||||||
| 247 | CVE-2023-4911GNU — GNU C Library Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 63.8% · 99.22nd | 2023-11-21 | 2023-12-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.638. | |||||||
| 248 | CVE-2023-43770Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 75 | 6.1 | 63.7% · 99.22nd | 2024-02-12 | 2024-03-04KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.637. | |||||||
| 249 | CVE-2023-35081Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Path Traversal VulnerabilityKEV since 2023 · listed over a year | 75 | 7.2 | 63.6% · 99.22nd | 2023-07-31 | 2023-08-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.636. | |||||||
| 250 | CVE-2011-0609Adobe — Adobe Flash Player Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 63.5% · 99.21st | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.635. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMozilla — Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
EVRS 76 Urgent
Rank 226 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 10.0 NVD
- EPSS
- 55.9% 99.05th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Google — Google Chromium CSS Use-After-Free Vulnerability
EVRS 76 Urgent
Rank 227 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 55.0% 99.03rd percentile
- In CISA KEV since
- 2026-02-17
- CISA deadline
- 2026-03-10 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
VMware — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
EVRS 76 Urgent
Rank 228 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 54.6% 99.02nd percentile
- In CISA KEV since
- 2024-11-20
- CISA deadline
- 2024-12-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 76 Urgent
Rank 229 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2026-09-04
- CISA deadline
- 2026-09-18 CISA federal deadline · Overdue by 34 days
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Fortinet — Fortinet FortiSandbox OS Command Injection Vulnerability
EVRS 76 Urgent
Rank 230 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 47.4% 98.8th percentile
- In CISA KEV since
- 2026-07-16
- CISA deadline
- 2026-07-19 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Ubiquiti — Ubiquiti UniFi OS Improper Input Validation Vulnerability
EVRS 76 Urgent
Rank 231 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 10.0 NVD
- EPSS
- 45.8% 98.8th percentile
- In CISA KEV since
- 2026-06-23
- CISA deadline
- 2026-06-26 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
ownCloud — ownCloud Improper Authentication Vulnerability
EVRS 76 Urgent
Rank 232 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.8 NVD
- EPSS
- 43.2% 98.7th percentile
- In CISA KEV since
- 2026-08-27
- CISA deadline
- 2026-08-30 CISA federal deadline · Overdue by 53 days
- Ransomware use
- Not known
- Vendor
- ownCloud
- Source
- CISA KEV
Ahsay — Ahsay AhsayCBS Command Injection Vulnerability
EVRS 76 Urgent
Rank 233 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 9.3 NVD
- EPSS
- 38.3% 98.6th percentile
- In CISA KEV since
- 2026-10-14
- CISA deadline
- 2026-10-17 CISA federal deadline · Overdue by 5 days
- Ransomware use
- Not known
- Vendor
- Ahsay
- Source
- CISA KEV
Oracle — Oracle JRE Unspecified Vulnerability
EVRS 75 Urgent
Rank 234 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 3.7 NVD
- EPSS
- 85.2% 99.72nd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 235 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.4 NVD
- EPSS
- 76.9% 99.55th percentile
- In CISA KEV since
- 2023-10-26
- CISA deadline
- 2023-11-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 236 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.5 NVD
- EPSS
- 75.6% 99.52nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ImageMagick
- Source
- CISA KEV
ImageMagick — ImageMagick Arbitrary File Deletion Vulnerability
EVRS 75 Urgent
Rank 237 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.5 NVD
- EPSS
- 75.3% 99.51st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ImageMagick
- Source
- CISA KEV
WordPress — WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 238 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 6.1 NVD
- EPSS
- 72.9% 99.45th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Zoho — Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 239 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 6.8 NVD
- EPSS
- 71.0% 99.4th percentile
- In CISA KEV since
- 2023-03-07
- CISA deadline
- 2023-03-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
D-Link — D-Link DCS-930L Devices OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 240 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.2 NVD
- EPSS
- 68.9% 99.35th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
IBM — IBM Data Risk Manager Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 241 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 4.3 NVD
- EPSS
- 68.5% 99.34th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Apple — Apple macOS Unspecified Vulnerability
EVRS 75 Urgent
Rank 242 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 5.5 NVD
- EPSS
- 68.5% 99.34th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Adobe — Adobe ColdFusion Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 243 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 66.4% 99.28th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 244 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 65.8% 99.27th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apache — Apache HTTP Server Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 245 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 65.0% 99.25th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
IETF — Service Location Protocol (SLP) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 246 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.5 NVD
- EPSS
- 64.0% 99.22nd percentile
- In CISA KEV since
- 2023-11-08
- CISA deadline
- 2023-11-29 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- IETF
- Source
- CISA KEV
GNU — GNU C Library Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 247 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 63.8% 99.22nd percentile
- In CISA KEV since
- 2023-11-21
- CISA deadline
- 2023-12-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 248 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 6.1 NVD
- EPSS
- 63.7% 99.22nd percentile
- In CISA KEV since
- 2024-02-12
- CISA deadline
- 2024-03-04 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
EVRS 75 Urgent
Rank 249 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.2 NVD
- EPSS
- 63.6% 99.22nd percentile
- In CISA KEV since
- 2023-07-31
- CISA deadline
- 2023-08-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Adobe — Adobe Flash Player Unspecified Vulnerability
EVRS 75 Urgent
Rank 250 of 2,962 tracked · as of 22 Oct 22:25 UTC
- CVSS
- 7.8 NVD
- EPSS
- 63.5% 99.21st percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
