Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 126 | CVE-2025-62593Ray-Project — Ray-Project Ray Code Injection VulnerabilityCISA federal deadline · Overdue by 2 months | 81 | 9.4 | 62.5% · 99.19th | 2026-08-17 | 2026-08-20CISA federal deadline · Overdue by 2 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 127 | CVE-2022-23134Zabbix — Zabbix Frontend Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 80 | 5.3 | 95.3% · 99.87th | 2022-02-22 | 2022-03-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.953. | |||||||
| 128 | CVE-2020-8193Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass VulnerabilityKEV since 2021 · listed over a year | 80 | 6.5 | 88.3% · 99.77th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.883. | |||||||
| 129 | CVE-2021-40655D-Link — D-Link DIR-605 Router Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 80 | 7.5 | 86.7% · 99.74th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.867. | |||||||
| 130 | CVE-2020-28949PEAR — PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 84.6% · 99.7th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 131 | CVE-2023-28432MinIO — MinIO Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 80 | 7.5 | 84.0% · 99.69th | 2023-04-21 | 2023-05-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.840. | |||||||
| 132 | CVE-2015-3035TP-Link — TP-Link Multiple Archer Devices Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 80 | 7.5 | 83.9% · 99.69th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.839. | |||||||
| 133 | CVE-2010-1297Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 82.5% · 99.67th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.825. | |||||||
| 134 | CVE-2009-4324Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 81.9% · 99.65th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.819. | |||||||
| 135 | CVE-2019-9621Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2025 · listed over a year | 80 | 7.5 | 81.0% · 99.63rd | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.810. | |||||||
| 136 | CVE-2023-22952SugarCRM — Multiple SugarCRM Products Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 80 | 8.8 | 80.1% · 99.62nd | 2023-02-02 | 2023-02-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.801. | |||||||
| 137 | CVE-2020-6418Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 78.8% · 99.59th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.788. | |||||||
| 138 | CVE-2021-22555Linux — Linux Kernel Heap Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 80 | 7.8 | 78.7% · 99.59th | 2025-10-06 | 2025-10-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.787. | |||||||
| 139 | CVE-2020-10221rConfig — rConfig OS Command Injection VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 77.1% · 99.55th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.771. | |||||||
| 140 | CVE-2019-15949Nagios — Nagios XI Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 77.0% · 99.55th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.770. | |||||||
| 141 | CVE-2017-9248Progress — Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityKEV since 2021 · listed over a year | 80 | 9.8 | 75.1% · 99.51st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.751. | |||||||
| 142 | CVE-2014-0780InduSoft — InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 74.7% · 99.5th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.747. | |||||||
| 143 | CVE-2005-2773Hewlett Packard (HP) — HP OpenView Network Node Manager Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 74.6% · 99.5th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.746. | |||||||
| 144 | CVE-2019-1003029Jenkins — Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 80 | 9.9 | 74.4% · 99.49th | 2022-04-25 | 2022-05-16KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.744. | |||||||
| 145 | CVE-2018-14667Red Hat — Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityKEV since 2023 · listed over a year | 80 | 9.8 | 74.2% · 99.49th | 2023-09-28 | 2023-10-19KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.742. | |||||||
| 146 | CVE-2024-21182Oracle — Oracle WebLogic Server Unspecified VulnerabilityCISA federal deadline · Overdue by 5 months | 80 | 7.5 | 74.2% · 99.49th | 2026-06-01 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.742. | |||||||
| 147 | CVE-2015-3043Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 73.9% · 99.48th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.739. | |||||||
| 148 | CVE-2017-6316Citrix — Citrix Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 73.0% · 99.46th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.730. | |||||||
| 149 | CVE-2018-7841Schneider Electric — Schneider Electric U.motion Builder SQL Injection VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 72.7% · 99.45th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.727. | |||||||
| 150 | CVE-2022-20699Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 72.5% · 99.44th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.725. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsRay-Project — Ray-Project Ray Code Injection Vulnerability
EVRS 81 Urgent
Rank 126 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.4 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2026-08-17
- CISA deadline
- 2026-08-20 CISA federal deadline · Overdue by 2 months
- Ransomware use
- Not known
- Vendor
- Ray-Project
- Source
- CISA KEV
Zabbix — Zabbix Frontend Improper Access Control Vulnerability
EVRS 80 Urgent
Rank 127 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 5.3 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2022-02-22
- CISA deadline
- 2022-03-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zabbix
- Source
- CISA KEV
Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
EVRS 80 Urgent
Rank 128 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 6.5 NVD
- EPSS
- 88.3% 99.77th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
D-Link — D-Link DIR-605 Router Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 129 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 86.7% 99.74th percentile
- In CISA KEV since
- 2024-05-16
- CISA deadline
- 2024-06-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
PEAR — PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
EVRS 80 Urgent
Rank 130 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 84.6% 99.7th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PEAR
- Source
- CISA KEV
MinIO — MinIO Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 131 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 84.0% 99.69th percentile
- In CISA KEV since
- 2023-04-21
- CISA deadline
- 2023-05-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- MinIO
- Source
- CISA KEV
TP-Link — TP-Link Multiple Archer Devices Directory Traversal Vulnerability
EVRS 80 Urgent
Rank 132 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 83.9% 99.69th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 80 Urgent
Rank 133 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 82.5% 99.67th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability
EVRS 80 Urgent
Rank 134 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 81.9% 99.65th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
EVRS 80 Urgent
Rank 135 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 81.0% 99.63rd percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
SugarCRM — Multiple SugarCRM Products Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 136 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 80.1% 99.62nd percentile
- In CISA KEV since
- 2023-02-02
- CISA deadline
- 2023-02-23 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- SugarCRM
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 80 Urgent
Rank 137 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 78.8% 99.59th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Linux — Linux Kernel Heap Out-of-Bounds Write Vulnerability
EVRS 80 Urgent
Rank 138 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 78.7% 99.59th percentile
- In CISA KEV since
- 2025-10-06
- CISA deadline
- 2025-10-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
rConfig — rConfig OS Command Injection Vulnerability
EVRS 80 Urgent
Rank 139 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 77.1% 99.55th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- rConfig
- Source
- CISA KEV
Nagios — Nagios XI Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 140 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 77.0% 99.55th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
Progress — Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
EVRS 80 Urgent
Rank 141 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 75.1% 99.51st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
InduSoft — InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
EVRS 80 Urgent
Rank 142 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- InduSoft
- Source
- CISA KEV
Hewlett Packard (HP) — HP OpenView Network Node Manager Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 143 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.6% 99.5th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hewlett Packard (HP)
- Source
- CISA KEV
Jenkins — Jenkins Script Security Plugin Sandbox Bypass Vulnerability
EVRS 80 Urgent
Rank 144 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.9 NVD
- EPSS
- 74.4% 99.49th percentile
- In CISA KEV since
- 2022-04-25
- CISA deadline
- 2022-05-16 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
Red Hat — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
EVRS 80 Urgent
Rank 145 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.2% 99.49th percentile
- In CISA KEV since
- 2023-09-28
- CISA deadline
- 2023-10-19 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 80 Urgent
Rank 146 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.2% 99.49th percentile
- In CISA KEV since
- 2026-06-01
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 80 Urgent
Rank 147 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.9% 99.48th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Citrix — Citrix Multiple Products Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 148 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.0% 99.46th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Schneider Electric — Schneider Electric U.motion Builder SQL Injection Vulnerability
EVRS 80 Urgent
Rank 149 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 72.7% 99.45th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Schneider Electric
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
EVRS 80 Urgent
Rank 150 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 72.5% 99.44th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
