Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 301 | CVE-2017-6737Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 45.2% · 98.8th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.452. | |||||||
| 302 | CVE-2024-9379Ivanti — Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 43.8% · 98.7th | 2024-10-09 | 2024-10-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.438. | |||||||
| 303 | CVE-2026-28318SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption VulnerabilityCISA federal deadline · Overdue by 4 months | 75 | 7.5 | 43.7% · 98.7th | 2026-06-05 | 2026-06-19CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.437. | |||||||
| 304 | CVE-2014-100005D-Link — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityKEV since 2024 · listed over a year | 75 | 8.0 | 43.5% · 98.7th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.435. | |||||||
| 305 | CVE-2025-2775SysAid — SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEV since 2025 · listed over a year | 75 | 7.5 | 42.6% · 98.7th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.426. | |||||||
| 306 | CVE-2026-48282Adobe — Adobe ColdFusion Path Traversal VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 42.4% · 98.7th | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.424. | |||||||
| 307 | CVE-2024-41710Mitel — Mitel SIP Phones Argument Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 7.2 | 41.6% · 98.7th | 2025-02-12 | 2025-03-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.416. | |||||||
| 308 | CVE-2019-16928Exim — Exim Out-of-bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 41.6% · 98.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.416. | |||||||
| 309 | CVE-2023-33538TP-Link — TP-Link Multiple Routers Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 41.6% · 98.7th | 2025-06-16 | 2025-07-07KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.416. | |||||||
| 310 | CVE-2025-20352Cisco — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution VulnerabilityKEV since 2025 · listed over a year | 75 | 7.7 | 41.5% · 98.7th | 2025-09-29 | 2025-10-20KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.415. | |||||||
| 311 | CVE-2023-4762Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 8.8 | 41.4% · 98.7th | 2024-02-06 | 2024-02-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.414. | |||||||
| 312 | CVE-2011-1823Android — Android OS Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 41.4% · 98.7th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.414. | |||||||
| 313 | CVE-2021-22894Ivanti — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 41.3% · 98.7th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.413. | |||||||
| 314 | CVE-2023-2033Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 40.8% · 98.7th | 2023-04-17 | 2023-05-08KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.408. | |||||||
| 315 | CVE-2017-5030Google — Google Chromium V8 Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 40.6% · 98.7th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.406. | |||||||
| 316 | CVE-2015-0666Cisco — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 40.4% · 98.6th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.404. | |||||||
| 317 | CVE-2010-5330Ubiquiti — Ubiquiti AirOS Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 40.2% · 98.6th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.402. | |||||||
| 318 | CVE-2014-0496Adobe — Adobe Reader and Acrobat Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 40.0% · 98.6th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.400. | |||||||
| 319 | CVE-2026-87902WordPress — WordPress Core Remote File Inclusion VulnerabilityCISA federal deadline · Overdue by 25 days | 75 | 8.1 | 40.0% · 98.6th | 2026-09-25 | 2026-09-28CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.400. | |||||||
| 320 | CVE-2013-6282Linux — Linux Kernel Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 39.7% · 98.6th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.397. | |||||||
| 321 | CVE-2021-27860FatPipe — FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploitKEV since 2022 · listed over a year | 75 | 8.8 | 39.7% · 98.6th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.397. | |||||||
| 322 | CVE-2023-39780ASUS — ASUS RT-AX55 Routers OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 39.5% · 98.6th | 2025-06-02 | 2025-06-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.395. | |||||||
| 323 | CVE-2021-26828OpenPLC — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 8.8 | 39.1% · 98.6th | 2025-12-03 | 2025-12-24CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.391. | |||||||
| 324 | CVE-2021-38003Google — Google Chromium V8 Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 38.6% · 98.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.386. | |||||||
| 325 | CVE-2024-55550Mitel — Mitel MiCollab Path Traversal VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 2.7 | 38.2% · 98.6th | 2025-01-07 | 2025-01-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 301 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 45.2% 98.8th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ivanti — Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
EVRS 75 Urgent
Rank 302 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.2 NVD
- EPSS
- 43.8% 98.7th percentile
- In CISA KEV since
- 2024-10-09
- CISA deadline
- 2024-10-30 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability
EVRS 75 Urgent
Rank 303 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 43.7% 98.7th percentile
- In CISA KEV since
- 2026-06-05
- CISA deadline
- 2026-06-19 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
D-Link — D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
EVRS 75 Urgent
Rank 304 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.0 NVD
- EPSS
- 43.5% 98.7th percentile
- In CISA KEV since
- 2024-05-16
- CISA deadline
- 2024-06-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
SysAid — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
EVRS 75 Urgent
Rank 305 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 42.6% 98.7th percentile
- In CISA KEV since
- 2025-07-22
- CISA deadline
- 2025-08-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SysAid
- Source
- CISA KEV
Adobe — Adobe ColdFusion Path Traversal Vulnerability
EVRS 75 Urgent
Rank 306 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 10.0 NVD
- EPSS
- 42.4% 98.7th percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mitel — Mitel SIP Phones Argument Injection Vulnerability
EVRS 75 Urgent
Rank 307 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.2 NVD
- EPSS
- 41.6% 98.7th percentile
- In CISA KEV since
- 2025-02-12
- CISA deadline
- 2025-03-05 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mitel
- Source
- CISA KEV
Exim — Exim Out-of-bounds Write Vulnerability
EVRS 75 Urgent
Rank 308 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 41.6% 98.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Exim
- Source
- CISA KEV
TP-Link — TP-Link Multiple Routers Command Injection Vulnerability
EVRS 75 Urgent
Rank 309 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 41.6% 98.7th percentile
- In CISA KEV since
- 2025-06-16
- CISA deadline
- 2025-07-07 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 310 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.7 NVD
- EPSS
- 41.5% 98.7th percentile
- In CISA KEV since
- 2025-09-29
- CISA deadline
- 2025-10-20 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 311 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 41.4% 98.7th percentile
- In CISA KEV since
- 2024-02-06
- CISA deadline
- 2024-02-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Android — Android OS Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 312 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 41.4% 98.7th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 313 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 41.3% 98.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 314 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 40.8% 98.7th percentile
- In CISA KEV since
- 2023-04-17
- CISA deadline
- 2023-05-08 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 315 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 40.6% 98.7th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 316 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 40.4% 98.6th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Ubiquiti — Ubiquiti AirOS Command Injection Vulnerability
EVRS 75 Urgent
Rank 317 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 40.2% 98.6th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ubiquiti
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 318 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 40.0% 98.6th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
WordPress — WordPress Core Remote File Inclusion Vulnerability
EVRS 75 Urgent
Rank 319 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.1 NVD
- EPSS
- 40.0% 98.6th percentile
- In CISA KEV since
- 2026-09-25
- CISA deadline
- 2026-09-28 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Linux — Linux Kernel Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 320 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 39.7% 98.6th percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
FatPipe — FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit
EVRS 75 Urgent
Rank 321 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 39.7% 98.6th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-01-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- FatPipe
- Source
- CISA KEV
ASUS — ASUS RT-AX55 Routers OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 322 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 39.5% 98.6th percentile
- In CISA KEV since
- 2025-06-02
- CISA deadline
- 2025-06-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ASUS
- Source
- CISA KEV
OpenPLC — OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
EVRS 75 Urgent
Rank 323 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 39.1% 98.6th percentile
- In CISA KEV since
- 2025-12-03
- CISA deadline
- 2025-12-24 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- OpenPLC
- Source
- CISA KEV
Google — Google Chromium V8 Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 324 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 38.6% 98.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Mitel — Mitel MiCollab Path Traversal Vulnerability
EVRS 75 Urgent
Rank 325 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 2.7 NVD
- EPSS
- 38.2% 98.6th percentile
- In CISA KEV since
- 2025-01-07
- CISA deadline
- 2025-01-28 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV