Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 251 | CVE-2019-8394Zoho — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 63.3% · 99.21st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.633. | |||||||
| 252 | CVE-2025-47813Wing FTP Server — Wing FTP Server Information Disclosure VulnerabilityCISA federal deadline · Overdue by 7 months | 75 | 4.3 | 62.5% · 99.19th | 2026-03-16 | 2026-03-30CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 253 | CVE-2019-5786Google — Google Chrome Blink Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 61.1% · 99.16th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.611. | |||||||
| 254 | CVE-2018-6065Google — Google Chromium V8 Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 60.3% · 99.14th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.603. | |||||||
| 255 | CVE-2020-8655EyesOfNetwork — EyesOfNetwork Improper Privilege Management VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 60.1% · 99.13rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.601. | |||||||
| 256 | CVE-2024-9380Ivanti — Ivanti Cloud Services Appliance (CSA) OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 59.7% · 99.13rd | 2024-10-09 | 2024-10-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.597. | |||||||
| 257 | CVE-2023-21608Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 59.4% · 99.12nd | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.594. | |||||||
| 258 | CVE-2023-6549Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 75 | 7.5 | 57.6% · 99.09th | 2024-01-17 | 2024-02-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.576. | |||||||
| 259 | CVE-2021-25297Nagios — Nagios XI OS Command InjectionKEV since 2022 · listed over a year | 75 | 8.8 | 56.7% · 99.06th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.567. | |||||||
| 260 | CVE-2019-5825Google — Google Chromium V8 Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 55.9% · 99.05th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.559. | |||||||
| 261 | CVE-2025-25181Advantive — Advantive VeraCore SQL Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.5 | 55.5% · 99.04th | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.555. | |||||||
| 262 | CVE-2025-32463Sudo — Sudo Inclusion of Functionality from Untrusted Control Sphere VulnerabilityKEV since 2025 · listed over a year | 75 | 7.8 | 55.5% · 99.04th | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.555. | |||||||
| 263 | CVE-2018-0125Cisco — Cisco VPN Routers Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 55.2% · 99.03rd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.552. | |||||||
| 264 | CVE-2025-58034Fortinet — Fortinet FortiWeb OS Command Injection VulnerabilityCISA federal deadline · Overdue by 11 months | 75 | 7.2 | 54.7% · 99.02nd | 2025-11-18 | 2025-11-25CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.547. | |||||||
| 265 | CVE-2006-1547Apache — Apache Struts 1 ActionForm Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 54.6% · 99.02nd | 2022-01-21 | 2022-07-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.546. | |||||||
| 266 | CVE-2016-0984Adobe — Adobe Flash Player and AIR Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 54.5% · 99.02nd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.545. | |||||||
| 267 | CVE-2020-29557D-Link — D-Link DIR-825 R1 Devices Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 54.3% · 99.01st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.543. | |||||||
| 268 | CVE-2023-20118Cisco — Cisco Small Business RV Series Routers Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 54.1% · 99.01st | 2025-03-03 | 2025-03-24KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.541. | |||||||
| 269 | CVE-2020-25079D-Link — D-Link DCS-2530L and DCS-2670L Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 54.0% · 99th | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.540. | |||||||
| 270 | CVE-2014-0130Rails — Ruby on Rails Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 53.7% · 99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.537. | |||||||
| 271 | CVE-2023-41064Apple — Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 53.4% · 99th | 2023-09-11 | 2023-10-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.534. | |||||||
| 272 | CVE-2025-14611Gladinet — Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 7.1 | 53.3% · 99th | 2025-12-15 | 2026-01-05CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.533. | |||||||
| 273 | CVE-2023-45249Acronis — Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 53.3% · 99th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.533. | |||||||
| 274 | CVE-2016-2388SAP — SAP NetWeaver Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 5.3 | 52.2% · 99th | 2022-06-09 | 2022-06-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.522. | |||||||
| 275 | CVE-2019-13272Linux — Linux Kernel Improper Privilege Management VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 52.2% · 99th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.522. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsZoho — Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
EVRS 75 Urgent
Rank 251 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.5 NVD
- EPSS
- 63.3% 99.21st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Wing FTP Server — Wing FTP Server Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 252 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 4.3 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2026-03-16
- CISA deadline
- 2026-03-30 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Wing FTP Server
- Source
- CISA KEV
Google — Google Chrome Blink Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 253 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.5 NVD
- EPSS
- 61.1% 99.16th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 254 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 60.3% 99.14th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
EyesOfNetwork — EyesOfNetwork Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 255 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 60.1% 99.13rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- EyesOfNetwork
- Source
- CISA KEV
Ivanti — Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 256 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 59.7% 99.13rd percentile
- In CISA KEV since
- 2024-10-09
- CISA deadline
- 2024-10-30 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 257 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 59.4% 99.12nd percentile
- In CISA KEV since
- 2023-10-10
- CISA deadline
- 2023-10-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 258 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.5 NVD
- EPSS
- 57.6% 99.09th percentile
- In CISA KEV since
- 2024-01-17
- CISA deadline
- 2024-02-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Nagios — Nagios XI OS Command Injection
EVRS 75 Urgent
Rank 259 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 56.7% 99.06th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 260 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 6.5 NVD
- EPSS
- 55.9% 99.05th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Advantive — Advantive VeraCore SQL Injection Vulnerability
EVRS 75 Urgent
Rank 261 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.5 NVD
- EPSS
- 55.5% 99.04th percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Advantive
- Source
- CISA KEV
Sudo — Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
EVRS 75 Urgent
Rank 262 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 55.5% 99.04th percentile
- In CISA KEV since
- 2025-09-29
- CISA deadline
- 2025-10-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sudo
- Source
- CISA KEV
Cisco — Cisco VPN Routers Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 263 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.2% 99.03rd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Fortinet — Fortinet FortiWeb OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 264 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 54.7% 99.02nd percentile
- In CISA KEV since
- 2025-11-18
- CISA deadline
- 2025-11-25 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Apache — Apache Struts 1 ActionForm Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 265 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.5 NVD
- EPSS
- 54.6% 99.02nd percentile
- In CISA KEV since
- 2022-01-21
- CISA deadline
- 2022-07-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe Flash Player and AIR Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 266 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 54.5% 99.02nd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
D-Link — D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 267 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.8 NVD
- EPSS
- 54.3% 99.01st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Command Injection Vulnerability
EVRS 75 Urgent
Rank 268 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.2 NVD
- EPSS
- 54.1% 99.01st percentile
- In CISA KEV since
- 2025-03-03
- CISA deadline
- 2025-03-24 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
D-Link — D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
EVRS 75 Urgent
Rank 269 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 8.8 NVD
- EPSS
- 54.0% 99th percentile
- In CISA KEV since
- 2025-08-05
- CISA deadline
- 2025-08-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Rails — Ruby on Rails Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 270 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.5 NVD
- EPSS
- 53.7% 99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Rails
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 271 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 53.4% 99th percentile
- In CISA KEV since
- 2023-09-11
- CISA deadline
- 2023-10-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Gladinet — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
EVRS 75 Urgent
Rank 272 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.1 NVD
- EPSS
- 53.3% 99th percentile
- In CISA KEV since
- 2025-12-15
- CISA deadline
- 2026-01-05 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Gladinet
- Source
- CISA KEV
Acronis — Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
EVRS 75 Urgent
Rank 273 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 9.8 NVD
- EPSS
- 53.3% 99th percentile
- In CISA KEV since
- 2024-07-29
- CISA deadline
- 2024-08-19 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Acronis
- Source
- CISA KEV
SAP — SAP NetWeaver Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 274 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 5.3 NVD
- EPSS
- 52.2% 99th percentile
- In CISA KEV since
- 2022-06-09
- CISA deadline
- 2022-06-30 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Linux — Linux Kernel Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 275 of 2,962 tracked · as of 22 Oct 23:21 UTC
- CVSS
- 7.8 NVD
- EPSS
- 52.2% 99th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
