Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 351 | CVE-2016-4655Apple — Apple iOS Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 5.5 | 33.4% · 98.4th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.334. | |||||||
| 352 | CVE-2021-30633Google — Google Chromium Indexed DB API Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 33.2% · 98.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.332. | |||||||
| 353 | CVE-2020-8195Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 33.0% · 98.4th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.330. | |||||||
| 354 | CVE-2017-6884Zyxel — Zyxel EMG2926 Routers Command Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.8 | 33.0% · 98.4th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 355 | CVE-2020-35730Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 32.9% · 98.4th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.329. | |||||||
| 356 | CVE-2026-20133Cisco — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.5 | 32.4% · 98.3rd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.324. | |||||||
| 357 | CVE-2025-20393Cisco — Cisco Multiple Products Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 10 months | 75 | 10.0 | 32.4% · 98.3rd | 2025-12-17 | 2025-12-24CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.324. | |||||||
| 358 | CVE-2013-0641Adobe — Adobe Reader Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 32.3% · 98.3rd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 359 | CVE-2024-57968Advantive — Advantive VeraCore Unrestricted File Upload VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 32.3% · 98.3rd | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 360 | CVE-2020-8218Pulse Secure — Pulse Connect Secure Code Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 32.2% · 98.3rd | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 361 | CVE-2017-5070Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 32.1% · 98.3rd | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.321. | |||||||
| 362 | CVE-2025-43300Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 10.0 | 32.0% · 98.3rd | 2025-08-21 | 2025-09-11KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.320. | |||||||
| 363 | CVE-2022-4135Google — Google Chromium GPU Heap Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.6 | 31.9% · 98.3rd | 2022-11-28 | 2022-12-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.319. | |||||||
| 364 | CVE-2026-0300Palo Alto Networks — Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityCISA federal deadline · Overdue by 5 months | 75 | 9.3 | 31.7% · 98.3rd | 2026-05-06 | 2026-05-09CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.317. | |||||||
| 365 | CVE-2024-11182MDaemon — MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 75 | 5.3 | 31.4% · 98.3rd | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.314. | |||||||
| 366 | CVE-2016-4523Trihedral — Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 31.2% · 98.3rd | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.312. | |||||||
| 367 | CVE-2025-0994Trimble — Trimble Cityworks Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 31.1% · 98.3rd | 2025-02-07 | 2025-02-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.311. | |||||||
| 368 | CVE-2025-32756Fortinet — Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 30.9% · 98.3rd | 2025-05-14 | 2025-06-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.309. | |||||||
| 369 | CVE-2022-24682Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 30.9% · 98.3rd | 2022-02-25 | 2022-03-11KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 370 | CVE-2026-56290Joomlack — Joomlack Page Builder Improper Access Control VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 10.0 | 30.9% · 98.3rd | 2026-07-07 | 2026-07-10CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.309. | |||||||
| 371 | CVE-2018-19953QNAP — QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 30.5% · 98.2nd | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 372 | CVE-2021-27852Checkbox — Checkbox Survey Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 30.3% · 98.2nd | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.303. | |||||||
| 373 | CVE-2019-3568Meta Platforms — WhatsApp VOIP Stack Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 30.1% · 98.2nd | 2022-04-19 | 2022-05-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.301. | |||||||
| 374 | CVE-2019-13608Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 7.5 | 30.0% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 375 | CVE-2018-6882Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 29.8% · 98.2nd | 2022-04-19 | 2022-05-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApple — Apple iOS Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 351 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.5 NVD
- EPSS
- 33.4% 98.4th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium Indexed DB API Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 352 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.6 NVD
- EPSS
- 33.2% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 353 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 33.0% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Zyxel — Zyxel EMG2926 Routers Command Injection Vulnerability
EVRS 75 Urgent
Rank 354 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 33.0% 98.4th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 355 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 32.9% 98.4th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
EVRS 75 Urgent
Rank 356 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 32.4% 98.3rd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Multiple Products Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 357 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 32.4% 98.3rd percentile
- In CISA KEV since
- 2025-12-17
- CISA deadline
- 2025-12-24 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Reader Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 358 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 32.3% 98.3rd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Advantive — Advantive VeraCore Unrestricted File Upload Vulnerability
EVRS 75 Urgent
Rank 359 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 32.3% 98.3rd percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Advantive
- Source
- CISA KEV
Pulse Secure — Pulse Connect Secure Code Injection Vulnerability
EVRS 75 Urgent
Rank 360 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 32.2% 98.3rd percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Pulse Secure
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 361 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 32.1% 98.3rd percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 362 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 32.0% 98.3rd percentile
- In CISA KEV since
- 2025-08-21
- CISA deadline
- 2025-09-11 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium GPU Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 363 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.6 NVD
- EPSS
- 31.9% 98.3rd percentile
- In CISA KEV since
- 2022-11-28
- CISA deadline
- 2022-12-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability
EVRS 75 Urgent
Rank 364 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.3 NVD
- EPSS
- 31.7% 98.3rd percentile
- In CISA KEV since
- 2026-05-06
- CISA deadline
- 2026-05-09 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
MDaemon — MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 365 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.3 NVD
- EPSS
- 31.4% 98.3rd percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- MDaemon
- Source
- CISA KEV
Trihedral — Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 366 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 31.2% 98.3rd percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trihedral
- Source
- CISA KEV
Trimble — Trimble Cityworks Deserialization Vulnerability
EVRS 75 Urgent
Rank 367 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.6 NVD
- EPSS
- 31.1% 98.3rd percentile
- In CISA KEV since
- 2025-02-07
- CISA deadline
- 2025-02-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trimble
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 368 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2025-05-14
- CISA deadline
- 2025-06-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 369 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2022-02-25
- CISA deadline
- 2022-03-11 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Joomlack — Joomlack Page Builder Improper Access Control Vulnerability
EVRS 75 Urgent
Rank 370 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2026-07-07
- CISA deadline
- 2026-07-10 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Not known
- Vendor
- Joomlack
- Source
- CISA KEV
QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 371 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.5% 98.2nd percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Checkbox — Checkbox Survey Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 372 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.3% 98.2nd percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Checkbox
- Source
- CISA KEV
Meta Platforms — WhatsApp VOIP Stack Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 373 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.1% 98.2nd percentile
- In CISA KEV since
- 2022-04-19
- CISA deadline
- 2022-05-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Meta Platforms
- Source
- CISA KEV
Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
EVRS 75 Urgent
Rank 374 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 30.0% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 375 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 29.8% 98.2nd percentile
- In CISA KEV since
- 2022-04-19
- CISA deadline
- 2022-05-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV