Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 26 | CVE-2020-17463Fuel CMS — Fuel CMS SQL Injection VulnerabilityKEV since 2021 · listed over a year | 84 | 9.8 | 89.7% · 99.79th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.897. | |||||||
| 27 | CVE-2019-17621D-Link — D-Link DIR-859 Router Command Execution VulnerabilityKEV since 2023 · listed over a year | 84 | 9.8 | 89.6% · 99.79th | 2023-06-29 | 2023-07-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.896. | |||||||
| 28 | CVE-2018-14839LG — LG N1A1 NAS Remote Command Execution VulnerabilityKEV since 2022 · listed over a year | 84 | 9.8 | 89.4% · 99.79th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.894. | |||||||
| 29 | CVE-2011-2462Adobe — Adobe Reader and Acrobat Universal 3D Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 84 | 9.8 | 88.9% · 99.78th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.889. | |||||||
| 30 | CVE-2026-1603Ivanti — Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityCISA federal deadline · Overdue by 7 months | 84 | 7.5 | 88.3% · 99.77th | 2026-03-09 | 2026-03-23CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.883. | |||||||
| 31 | CVE-2025-4428Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEV since 2025 · listed over a year | 84 | 8.8 | 88.0% · 99.77th | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.880. | |||||||
| 32 | CVE-2020-17496vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 9.8 | 87.5% · 99.76th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.875. | |||||||
| 33 | CVE-2022-26143Mitel — MiCollab, MiVoice Business Express Access Control VulnerabilityKEV since 2022 · listed over a year | 84 | 9.8 | 87.3% · 99.76th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.873. | |||||||
| 34 | CVE-2023-2868Barracuda Networks — Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityKEV since 2023 · listed over a year | 84 | 9.8 | 86.8% · 99.75th | 2023-05-26 | 2023-06-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.868. | |||||||
| 35 | CVE-2020-8644PlaySMS — PlaySMS Server-Side Template Injection VulnerabilityKEV since 2021 · listed over a year | 84 | 9.8 | 86.7% · 99.74th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.867. | |||||||
| 36 | CVE-2025-8110Gogs — Gogs Path Traversal VulnerabilityCISA federal deadline · Overdue by 9 months | 84 | 8.7 | 85.2% · 99.72nd | 2026-01-12 | 2026-02-02CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.852. | |||||||
| 37 | CVE-2025-64328Sangoma — Sangoma FreePBX OS Command Injection VulnerabilityCISA federal deadline · Overdue by 8 months | 84 | 8.6 | 84.6% · 99.71st | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 38 | CVE-2019-9874Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityKEV since 2025 · listed over a year | 84 | 9.8 | 83.7% · 99.69th | 2025-03-26 | 2025-04-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.837. | |||||||
| 39 | CVE-2025-14847MongoDB — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency VulnerabilityCISA federal deadline · Overdue by 9 months | 84 | 8.7 | 83.2% · 99.68th | 2025-12-29 | 2026-01-19CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.832. | |||||||
| 40 | CVE-2010-3765Mozilla — Mozilla Multiple Products Remote Code Execution VulnerabilityKEV since 2025 · listed over a year | 84 | 9.8 | 83.2% · 99.68th | 2025-10-06 | 2025-10-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.832. | |||||||
| 41 | CVE-2025-34026Versa — Versa Concerto Improper Authentication VulnerabilityCISA federal deadline · Overdue by 8 months | 84 | 9.2 | 81.8% · 99.65th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.818. | |||||||
| 42 | CVE-2024-57728SimpleHelp — SimpleHelp Path Traversal VulnerabilityRansomwareCISA federal deadline · Overdue by 5 months | 84 | 7.2 | 64.7% · 99.24th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 43 | CVE-2020-11738WordPress — WordPress Snap Creek Duplicator Plugin File Download VulnerabilityKEV since 2021 · listed over a year | 83 | 7.5 | 97.8% · 99.91st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.978. | |||||||
| 44 | CVE-2020-17519Apache — Apache Flink Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 83 | 7.5 | 97.8% · 99.91st | 2024-05-23 | 2024-06-13KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.978. | |||||||
| 45 | CVE-2020-14883Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2021 · listed over a year | 83 | 7.2 | 97.7% · 99.91st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.977. | |||||||
| 46 | CVE-2020-14864Oracle — Oracle Business Intelligence Enterprise Edition Path TransversalKEV since 2022 · listed over a year | 83 | 7.5 | 97.2% · 99.9th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.972. | |||||||
| 47 | CVE-2020-8260Ivanti — Ivanti Pulse Connect Secure Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 7.2 | 96.5% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.965. | |||||||
| 48 | CVE-2021-20124DrayTek — Draytek VigorConnect Path Traversal VulnerabilityKEV since 2024 · listed over a year | 83 | 7.5 | 96.3% · 99.88th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 49 | CVE-2019-20085TVT — TVT NVMS-1000 Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 83 | 7.5 | 96.1% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.961. | |||||||
| 50 | CVE-2017-3506Oracle — Oracle WebLogic Server OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 83 | 7.4 | 96.0% · 99.88th | 2024-06-03 | 2024-06-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.960. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsFuel CMS — Fuel CMS SQL Injection Vulnerability
EVRS 84 Urgent
Rank 26 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 89.7% 99.79th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fuel CMS
- Source
- CISA KEV
D-Link — D-Link DIR-859 Router Command Execution Vulnerability
EVRS 84 Urgent
Rank 27 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 89.6% 99.79th percentile
- In CISA KEV since
- 2023-06-29
- CISA deadline
- 2023-07-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
LG — LG N1A1 NAS Remote Command Execution Vulnerability
EVRS 84 Urgent
Rank 28 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 89.4% 99.79th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- LG
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
EVRS 84 Urgent
Rank 29 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.9% 99.78th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
EVRS 84 Urgent
Rank 30 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 88.3% 99.77th percentile
- In CISA KEV since
- 2026-03-09
- CISA deadline
- 2026-03-23 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability
EVRS 84 Urgent
Rank 31 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.8 NVD
- EPSS
- 88.0% 99.77th percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
vBulletin — vBulletin PHP Module Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 32 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 87.5% 99.76th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- vBulletin
- Source
- CISA KEV
Mitel — MiCollab, MiVoice Business Express Access Control Vulnerability
EVRS 84 Urgent
Rank 33 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 87.3% 99.76th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mitel
- Source
- CISA KEV
Barracuda Networks — Barracuda Networks ESG Appliance Improper Input Validation Vulnerability
EVRS 84 Urgent
Rank 34 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.8% 99.75th percentile
- In CISA KEV since
- 2023-05-26
- CISA deadline
- 2023-06-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Barracuda Networks
- Source
- CISA KEV
PlaySMS — PlaySMS Server-Side Template Injection Vulnerability
EVRS 84 Urgent
Rank 35 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.7% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- PlaySMS
- Source
- CISA KEV
Gogs — Gogs Path Traversal Vulnerability
EVRS 84 Urgent
Rank 36 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.7 NVD
- EPSS
- 85.2% 99.72nd percentile
- In CISA KEV since
- 2026-01-12
- CISA deadline
- 2026-02-02 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Gogs
- Source
- CISA KEV
Sangoma — Sangoma FreePBX OS Command Injection Vulnerability
EVRS 84 Urgent
Rank 37 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.6 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
EVRS 84 Urgent
Rank 38 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.7% 99.69th percentile
- In CISA KEV since
- 2025-03-26
- CISA deadline
- 2025-04-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sitecore
- Source
- CISA KEV
MongoDB — MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability
EVRS 84 Urgent
Rank 39 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 8.7 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2025-12-29
- CISA deadline
- 2026-01-19 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- MongoDB
- Source
- CISA KEV
Mozilla — Mozilla Multiple Products Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 40 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2025-10-06
- CISA deadline
- 2025-10-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Versa — Versa Concerto Improper Authentication Vulnerability
EVRS 84 Urgent
Rank 41 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 9.2 NVD
- EPSS
- 81.8% 99.65th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Versa
- Source
- CISA KEV
SimpleHelp — SimpleHelp Path Traversal Vulnerability
EVRS 84 Urgent
Rank 42 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.2 NVD
- EPSS
- 64.7% 99.24th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
WordPress — WordPress Snap Creek Duplicator Plugin File Download Vulnerability
EVRS 83 Urgent
Rank 43 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 97.8% 99.91st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Apache — Apache Flink Improper Access Control Vulnerability
EVRS 83 Urgent
Rank 44 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 97.8% 99.91st percentile
- In CISA KEV since
- 2024-05-23
- CISA deadline
- 2024-06-13 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 83 Urgent
Rank 45 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.2 NVD
- EPSS
- 97.7% 99.91st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Oracle — Oracle Business Intelligence Enterprise Edition Path Transversal
EVRS 83 Urgent
Rank 46 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 97.2% 99.9th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Code Execution Vulnerability
EVRS 83 Urgent
Rank 47 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.2 NVD
- EPSS
- 96.5% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
DrayTek — Draytek VigorConnect Path Traversal Vulnerability
EVRS 83 Urgent
Rank 48 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2024-09-03
- CISA deadline
- 2024-09-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
TVT — TVT NVMS-1000 Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 49 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.5 NVD
- EPSS
- 96.1% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- TVT
- Source
- CISA KEV
Oracle — Oracle WebLogic Server OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 50 of 2,960 tracked · as of 22 Oct 06:00 UTC
- CVSS
- 7.4 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2024-06-03
- CISA deadline
- 2024-06-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV