Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 601 | CVE-2018-0172Cisco — Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.8% · 94.7th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.078. | |||||||
| 602 | CVE-2018-0155Cisco — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.7% · 94.6th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.077. | |||||||
| 603 | CVE-2012-2034Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.7% · 94.6th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.077. | |||||||
| 604 | CVE-2021-1870Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 7.7% · 94.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.077. | |||||||
| 605 | CVE-2018-0173Cisco — Cisco IOS and IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.6% · 94.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.076. | |||||||
| 606 | CVE-2018-0174Cisco — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.6% · 94.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.076. | |||||||
| 607 | CVE-2024-5274Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2024 · listed over a year | 75 | 9.6 | 7.5% · 94.5th | 2024-05-28 | 2024-06-18KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.075. | |||||||
| 608 | CVE-2021-30554Google — Google Chromium WebGL Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 7.4% · 94.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.074. | |||||||
| 609 | CVE-2017-6744Cisco — Cisco IOS Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 7.3% · 94.4th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.073. | |||||||
| 610 | CVE-2020-3950VMware — VMware Multiple Products Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 7.3% · 94.3rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.073. | |||||||
| 611 | CVE-2025-24472Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityRansomwareKEV since 2025 · listed over a year | 75 | 8.1 | 7.2% · 94.3rd | 2025-03-18 | 2025-04-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 612 | CVE-2026-20128Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format VulnerabilityCISA federal deadline · Overdue by 6 months | 75 | 7.5 | 7.2% · 94.3rd | 2026-04-20 | 2026-04-23CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.072. | |||||||
| 613 | CVE-2018-0158Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak VulnerabilityKEV since 2022 · listed over a year | 75 | 8.6 | 7.2% · 94.3rd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.072. | |||||||
| 614 | CVE-2021-1879Apple — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 7.1% · 94.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 615 | CVE-2019-0344SAP — SAP Commerce Cloud Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 7.1% · 94.2nd | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 616 | CVE-2017-12231Cisco — Cisco IOS Software Network Address Translation Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 617 | CVE-2017-12233Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 618 | CVE-2017-12234Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 619 | CVE-2017-12235Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 620 | CVE-2017-12237Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 621 | CVE-2018-0154Cisco — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 7.1% · 94.2nd | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 622 | CVE-2020-6820Mozilla — Mozilla Firefox And Thunderbird Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.1 | 7.1% · 94.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 623 | CVE-2026-48710Kludex — Kludex Starlette HTTP Request/Response Smuggling VulnerabilityCISA federal deadline · Overdue by 37 days | 75 | 6.5 | 7.1% · 94.2nd | 2026-09-02 | 2026-09-16CISA federal deadline · Overdue by 37 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.071. | |||||||
| 624 | CVE-2021-30713Apple — Apple macOS Unspecified VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 7.0% · 94.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
| 625 | CVE-2021-1871Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 9.8 | 7.0% · 94.1st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.070. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 601 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.8% 94.7th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 602 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.7% 94.6th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 603 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.7% 94.6th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 604 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.7% 94.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 605 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.6% 94.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
EVRS 75 Urgent
Rank 606 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.6% 94.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 607 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.6 NVD
- EPSS
- 7.5% 94.5th percentile
- In CISA KEV since
- 2024-05-28
- CISA deadline
- 2024-06-18 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium WebGL Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 608 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 7.4% 94.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco IOS Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 609 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.8 NVD
- EPSS
- 7.3% 94.4th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
VMware — VMware Multiple Products Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 610 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 7.3% 94.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 611 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.1 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2025-03-18
- CISA deadline
- 2025-04-08 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cisco — Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability
EVRS 75 Urgent
Rank 612 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-04-23 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability
EVRS 75 Urgent
Rank 613 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.6 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 614 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.1 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
SAP — SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 615 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2024-09-30
- CISA deadline
- 2024-10-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Cisco — Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 616 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 617 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 618 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 619 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 620 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Cisco — Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 621 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Mozilla — Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 622 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 8.1 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Kludex — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
EVRS 75 Urgent
Rank 623 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 6.5 NVD
- EPSS
- 7.1% 94.2nd percentile
- In CISA KEV since
- 2026-09-02
- CISA deadline
- 2026-09-16 CISA federal deadline · Overdue by 37 days
- Ransomware use
- Not known
- Vendor
- Kludex
- Source
- CISA KEV
Apple — Apple macOS Unspecified Vulnerability
EVRS 75 Urgent
Rank 624 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 7.0% 94.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 625 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.0% 94.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
