Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 276 | CVE-2021-28550Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 51.9% · 99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.519. | |||||||
| 277 | CVE-2021-20023SonicWall — SonicWall Email Security Path Traversal VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 4.9 | 51.7% · 98.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 278 | CVE-2023-32434Apple — Apple Multiple Products Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 51.5% · 98.9th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.515. | |||||||
| 279 | CVE-2013-5223D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 50.8% · 98.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.508. | |||||||
| 280 | CVE-2023-49897FXC — FXC AE1021, AE1021PE OS Command Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 50.4% · 98.9th | 2023-12-21 | 2024-01-11KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.504. | |||||||
| 281 | CVE-2019-13720Google — Google Chrome WebAudio Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 49.4% · 98.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.494. | |||||||
| 282 | CVE-2021-22017VMware — VMware vCenter Server Improper Access ControlKEV since 2022 · listed over a year | 75 | 5.3 | 49.2% · 98.9th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.492. | |||||||
| 283 | CVE-2021-3493Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 49.2% · 98.9th | 2022-10-20 | 2022-11-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.492. | |||||||
| 284 | CVE-2023-37580Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 49.1% · 98.9th | 2023-07-27 | 2023-08-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.491. | |||||||
| 285 | CVE-2023-5217Google — Google Chromium libvpx Heap Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 49.0% · 98.9th | 2023-10-02 | 2023-10-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.490. | |||||||
| 286 | CVE-2014-4404Apple — Apple OS X Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 48.9% · 98.9th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 287 | CVE-2025-68645Synacor — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 8 months | 75 | 8.8 | 48.9% · 98.9th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 288 | CVE-2019-15752Docker — Docker Desktop Community Edition Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 48.6% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.486. | |||||||
| 289 | CVE-2022-23227NUUO — NUUO NVRmini2 Devices Missing Authentication VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 48.5% · 98.9th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.485. | |||||||
| 290 | CVE-2020-16009Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 48.3% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.483. | |||||||
| 291 | CVE-2016-1646Google — Google Chromium V8 Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.481. | |||||||
| 292 | CVE-2018-5430TIBCO — TIBCO JasperReports Server Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-12-29 | 2023-01-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.481. | |||||||
| 293 | CVE-2021-26829OpenPLC — OpenPLC ScadaBR Cross-site Scripting VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 5.4 | 48.0% · 98.9th | 2025-11-28 | 2025-12-19CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.480. | |||||||
| 294 | CVE-2013-2094Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.4 | 47.7% · 98.8th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.477. | |||||||
| 295 | CVE-2021-40407Reolink — Reolink RLC-410W IP Camera OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 47.6% · 98.8th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.476. | |||||||
| 296 | CVE-2016-3976SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 47.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.473. | |||||||
| 297 | CVE-2022-39197Fortra — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 46.4% · 98.8th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.464. | |||||||
| 298 | CVE-2019-17026Mozilla — Mozilla Firefox And Thunderbird Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 46.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.463. | |||||||
| 299 | CVE-2017-6862NETGEAR — NETGEAR Multiple Devices Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 45.7% · 98.8th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.457. | |||||||
| 300 | CVE-2017-16651Roundcube — Roundcube Webmail File Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 45.7% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.457. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe Acrobat and Reader Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 276 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 51.9% 99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SonicWall — SonicWall Email Security Path Traversal Vulnerability
EVRS 75 Urgent
Rank 277 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 4.9 NVD
- EPSS
- 51.7% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple Multiple Products Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 278 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 51.5% 98.9th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 279 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.4 NVD
- EPSS
- 50.8% 98.9th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
FXC — FXC AE1021, AE1021PE OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 280 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 50.4% 98.9th percentile
- In CISA KEV since
- 2023-12-21
- CISA deadline
- 2024-01-11 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- FXC
- Source
- CISA KEV
Google — Google Chrome WebAudio Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 281 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 49.4% 98.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
VMware — VMware vCenter Server Improper Access Control
EVRS 75 Urgent
Rank 282 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.3 NVD
- EPSS
- 49.2% 98.9th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-01-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 283 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 49.2% 98.9th percentile
- In CISA KEV since
- 2022-10-20
- CISA deadline
- 2022-11-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 284 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 6.1 NVD
- EPSS
- 49.1% 98.9th percentile
- In CISA KEV since
- 2023-07-27
- CISA deadline
- 2023-08-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Google — Google Chromium libvpx Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 285 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 49.0% 98.9th percentile
- In CISA KEV since
- 2023-10-02
- CISA deadline
- 2023-10-23 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple OS X Heap-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 286 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability
EVRS 75 Urgent
Rank 287 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Docker — Docker Desktop Community Edition Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 288 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 48.6% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Docker
- Source
- CISA KEV
NUUO — NUUO NVRmini2 Devices Missing Authentication Vulnerability
EVRS 75 Urgent
Rank 289 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 48.5% 98.9th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- NUUO
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 290 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.3% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 291 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.1% 98.9th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
TIBCO — TIBCO JasperReports Server Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 292 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.1% 98.9th percentile
- In CISA KEV since
- 2022-12-29
- CISA deadline
- 2023-01-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TIBCO
- Source
- CISA KEV
OpenPLC — OpenPLC ScadaBR Cross-site Scripting Vulnerability
EVRS 75 Urgent
Rank 293 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.4 NVD
- EPSS
- 48.0% 98.9th percentile
- In CISA KEV since
- 2025-11-28
- CISA deadline
- 2025-12-19 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- OpenPLC
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 294 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.4 NVD
- EPSS
- 47.7% 98.8th percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Reolink — Reolink RLC-410W IP Camera OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 295 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.2 NVD
- EPSS
- 47.6% 98.8th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Reolink
- Source
- CISA KEV
SAP — SAP NetWeaver Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 296 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.5 NVD
- EPSS
- 47.3% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Fortra — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 297 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 6.1 NVD
- EPSS
- 46.4% 98.8th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortra
- Source
- CISA KEV
Mozilla — Mozilla Firefox And Thunderbird Type Confusion Vulnerability
EVRS 75 Urgent
Rank 298 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.8 NVD
- EPSS
- 46.3% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
NETGEAR — NETGEAR Multiple Devices Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 299 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 45.7% 98.8th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Roundcube — Roundcube Webmail File Disclosure Vulnerability
EVRS 75 Urgent
Rank 300 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 7.8 NVD
- EPSS
- 45.7% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
