Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 101 | CVE-2025-6205Dassault Systèmes — Dassault Systèmes DELMIA Apriso Missing Authorization VulnerabilityCISA federal deadline · Overdue by 11 months | 82 | 9.1 | 73.6% · 99.47th | 2025-10-28 | 2025-11-18CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.736. | |||||||
| 102 | CVE-2015-7645Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 82 | 7.8 | 65.3% · 99.26th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 103 | CVE-2023-23752Joomla! — Joomla! Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 81 | 5.3 | 99.8% · 99.96th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 104 | CVE-2020-8243Ivanti — Ivanti Pulse Connect Secure Code Execution VulnerabilityKEV since 2021 · listed over a year | 81 | 7.2 | 90.8% · 99.81st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.908. | |||||||
| 105 | CVE-2021-20123DrayTek — Draytek VigorConnect Path Traversal VulnerabilityKEV since 2024 · listed over a year | 81 | 7.5 | 90.2% · 99.8th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 106 | CVE-2024-8190Ivanti — Ivanti Cloud Services Appliance OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 81 | 7.2 | 88.5% · 99.78th | 2024-09-13 | 2024-10-04KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 107 | CVE-2016-6415Cisco — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 81 | 7.5 | 87.7% · 99.76th | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.877. | |||||||
| 108 | CVE-2007-5659Adobe — Adobe Acrobat and Reader Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 81 | 7.8 | 87.4% · 99.76th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.874. | |||||||
| 109 | CVE-2016-9079Mozilla — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 81 | 7.5 | 87.4% · 99.76th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.874. | |||||||
| 110 | CVE-2018-9276Paessler — Paessler PRTG Network Monitor OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 81 | 7.2 | 87.0% · 99.75th | 2025-02-04 | 2025-02-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.870. | |||||||
| 111 | CVE-2013-0640Adobe — Adobe Reader and Acrobat Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 81 | 7.8 | 86.9% · 99.75th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.869. | |||||||
| 112 | CVE-2018-6961VMware — VMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityKEV since 2022 · listed over a year | 81 | 8.1 | 85.3% · 99.72nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.853. | |||||||
| 113 | CVE-2010-1871Red Hat — Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 81 | 8.8 | 83.4% · 99.68th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.834. | |||||||
| 114 | CVE-2009-3953Adobe — Adobe Acrobat and Reader Universal 3D Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 81 | 8.8 | 83.2% · 99.68th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.832. | |||||||
| 115 | CVE-2013-3346Adobe — Adobe Reader and Acrobat Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 81 | 9.8 | 78.9% · 99.59th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.789. | |||||||
| 116 | CVE-2022-26318WatchGuard — WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionKEV since 2022 · listed over a year | 81 | 9.8 | 78.2% · 99.58th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.782. | |||||||
| 117 | CVE-2023-34192Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 81 | 9.0 | 77.3% · 99.56th | 2025-02-25 | 2025-03-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.773. | |||||||
| 118 | CVE-2019-7238Sonatype — Sonatype Nexus Repository Manager Incorrect Access Control VulnerabilityKEV since 2021 · listed over a year | 81 | 9.8 | 76.6% · 99.54th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.766. | |||||||
| 119 | CVE-2012-0391Apache — Apache Struts 2 Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 81 | 9.8 | 75.6% · 99.52nd | 2022-01-21 | 2022-07-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.756. | |||||||
| 120 | CVE-2010-0738Red Hat — Red Hat JBoss Authentication Bypass VulnerabilityRansomwareKEV since 2022 · listed over a year | 81 | 5.3 | 74.7% · 99.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 121 | CVE-2025-1316Edimax — Edimax IC-7100 IP Camera OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 81 | 9.3 | 74.5% · 99.5th | 2025-03-19 | 2025-04-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.745. | |||||||
| 122 | CVE-2025-2746Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityKEV since 2025 · listed over a year | 81 | 9.8 | 74.1% · 99.49th | 2025-10-20 | 2025-11-10KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.741. | |||||||
| 123 | CVE-2025-20333Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 81 | 9.9 | 71.2% · 99.41st | 2025-09-25 | 2025-09-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.712. | |||||||
| 124 | CVE-2025-59718Fortinet — Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityCISA federal deadline · Overdue by 10 months | 81 | 9.8 | 68.3% · 99.33rd | 2025-12-16 | 2025-12-23CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.683. | |||||||
| 125 | CVE-2026-82078PaperCut — PaperCut NG/MF Unsafe Reflection VulnerabilityCISA federal deadline · Overdue by 38 days | 81 | 9.4 | 63.5% · 99.21st | 2026-08-31 | 2026-09-14CISA federal deadline · Overdue by 38 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.635. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsDassault Systèmes — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
EVRS 82 Urgent
Rank 101 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 73.6% 99.47th percentile
- In CISA KEV since
- 2025-10-28
- CISA deadline
- 2025-11-18 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- Dassault Systèmes
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 82 Urgent
Rank 102 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 65.3% 99.26th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Joomla! — Joomla! Improper Access Control Vulnerability
EVRS 81 Urgent
Rank 103 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Joomla!
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Code Execution Vulnerability
EVRS 81 Urgent
Rank 104 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 90.8% 99.81st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
DrayTek — Draytek VigorConnect Path Traversal Vulnerability
EVRS 81 Urgent
Rank 105 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2024-09-03
- CISA deadline
- 2024-09-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Ivanti — Ivanti Cloud Services Appliance OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 106 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2024-09-13
- CISA deadline
- 2024-10-04 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Cisco — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
EVRS 81 Urgent
Rank 107 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 87.7% 99.76th percentile
- In CISA KEV since
- 2023-05-19
- CISA deadline
- 2023-06-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Buffer Overflow Vulnerability
EVRS 81 Urgent
Rank 108 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 87.4% 99.76th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
EVRS 81 Urgent
Rank 109 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 87.4% 99.76th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Paessler — Paessler PRTG Network Monitor OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 110 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 87.0% 99.75th percentile
- In CISA KEV since
- 2025-02-04
- CISA deadline
- 2025-02-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Paessler
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability
EVRS 81 Urgent
Rank 111 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 86.9% 99.75th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
VMware — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
EVRS 81 Urgent
Rank 112 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 85.3% 99.72nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Red Hat — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
EVRS 81 Urgent
Rank 113 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 83.4% 99.68th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
EVRS 81 Urgent
Rank 114 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability
EVRS 81 Urgent
Rank 115 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.9% 99.59th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
EVRS 81 Urgent
Rank 116 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.2% 99.58th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 81 Urgent
Rank 117 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.0 NVD
- EPSS
- 77.3% 99.56th percentile
- In CISA KEV since
- 2025-02-25
- CISA deadline
- 2025-03-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Sonatype — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
EVRS 81 Urgent
Rank 118 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 76.6% 99.54th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sonatype
- Source
- CISA KEV
Apache — Apache Struts 2 Improper Input Validation Vulnerability
EVRS 81 Urgent
Rank 119 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 75.6% 99.52nd percentile
- In CISA KEV since
- 2022-01-21
- CISA deadline
- 2022-07-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Red Hat — Red Hat JBoss Authentication Bypass Vulnerability
EVRS 81 Urgent
Rank 120 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Edimax — Edimax IC-7100 IP Camera OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 121 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.3 NVD
- EPSS
- 74.5% 99.5th percentile
- In CISA KEV since
- 2025-03-19
- CISA deadline
- 2025-04-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Edimax
- Source
- CISA KEV
Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 81 Urgent
Rank 122 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.1% 99.49th percentile
- In CISA KEV since
- 2025-10-20
- CISA deadline
- 2025-11-10 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
EVRS 81 Urgent
Rank 123 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.9 NVD
- EPSS
- 71.2% 99.41st percentile
- In CISA KEV since
- 2025-09-25
- CISA deadline
- 2025-09-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
EVRS 81 Urgent
Rank 124 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.3% 99.33rd percentile
- In CISA KEV since
- 2025-12-16
- CISA deadline
- 2025-12-23 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Unsafe Reflection Vulnerability
EVRS 81 Urgent
Rank 125 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 63.5% 99.21st percentile
- In CISA KEV since
- 2026-08-31
- CISA deadline
- 2026-09-14 CISA federal deadline · Overdue by 38 days
- Ransomware use
- Not known
- Vendor
- PaperCut
- Source
- CISA KEV
