Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 176 | CVE-2021-21973VMware — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityKEV since 2022 · listed over a year | 78 | 5.3 | 88.0% · 99.77th | 2022-03-07 | 2022-03-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.880. | |||||||
| 177 | CVE-2023-49103ownCloud — ownCloud graphapi Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 78 | 7.5 | 78.4% · 99.58th | 2023-11-30 | 2023-12-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.784. | |||||||
| 178 | CVE-2020-8816Pi-hole — Pi-Hole AdminLTE Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 78 | 7.2 | 78.3% · 99.58th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.783. | |||||||
| 179 | CVE-2021-38406Delta Electronics — Delta Electronics DOPSoft 2 Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 78 | 7.8 | 76.4% · 99.54th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.764. | |||||||
| 180 | CVE-2018-15811DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityKEV since 2021 · listed over a year | 78 | 7.5 | 76.3% · 99.54th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.763. | |||||||
| 181 | CVE-2023-44221SonicWall — SonicWall SMA100 Appliances OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 78 | 7.2 | 76.2% · 99.54th | 2025-05-01 | 2025-05-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.762. | |||||||
| 182 | CVE-2021-30860Apple — Apple Multiple Products Integer Overflow VulnerabilityKEV since 2021 · listed over a year | 78 | 7.8 | 76.0% · 99.53rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.760. | |||||||
| 183 | CVE-2017-6334NETGEAR — NETGEAR DGN2200 Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 78 | 8.8 | 72.6% · 99.44th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.726. | |||||||
| 184 | CVE-2021-25296Nagios — Nagios XI OS Command InjectionKEV since 2022 · listed over a year | 78 | 8.8 | 71.9% · 99.43rd | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.719. | |||||||
| 185 | CVE-2024-20353Cisco — Cisco ASA and FTD Denial of Service VulnerabilityKEV since 2024 · listed over a year | 78 | 8.6 | 70.7% · 99.4th | 2024-04-24 | 2024-05-01KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.707. | |||||||
| 186 | CVE-2021-21220Google — Google Chromium V8 Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 78 | 8.8 | 70.4% · 99.39th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
| 187 | CVE-2017-6736Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 78 | 8.8 | 70.4% · 99.39th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
| 188 | CVE-2016-20017D-Link — D-Link DSL-2750B Devices Command Injection VulnerabilityKEV since 2024 · listed over a year | 78 | 9.8 | 66.6% · 99.29th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.666. | |||||||
| 189 | CVE-2013-2729Adobe — Adobe Reader and Acrobat Arbitrary Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 78 | 9.8 | 66.6% · 99.29th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.666. | |||||||
| 190 | CVE-2015-7755Juniper — Juniper ScreenOS Improper Authentication VulnerabilityKEV since 2025 · listed over a year | 78 | 9.8 | 61.1% · 99.16th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.611. | |||||||
| 191 | CVE-2024-54085AMI — AMI MegaRAC SPx Authentication Bypass by Spoofing VulnerabilityKEV since 2025 · listed over a year | 78 | 10.0 | 60.7% · 99.15th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.607. | |||||||
| 192 | CVE-2019-19006Sangoma — Sangoma FreePBX Improper Authentication VulnerabilityCISA federal deadline · Overdue by 8 months | 78 | 9.8 | 55.9% · 99.05th | 2026-02-03 | 2026-02-24CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.559. | |||||||
| 193 | CVE-2022-37055D-Link — D-Link Routers Buffer Overflow VulnerabilityCISA federal deadline · Overdue by 10 months | 78 | 9.8 | 55.5% · 99.04th | 2025-12-08 | 2025-12-29CISA federal deadline · Overdue by 10 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.555. | |||||||
| 194 | CVE-2023-36847Juniper — Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year | 77 | 5.3 | 83.5% · 99.69th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.835. | |||||||
| 195 | CVE-2018-18809TIBCO — TIBCO JasperReports Library Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 77 | 6.5 | 79.1% · 99.6th | 2022-12-29 | 2023-01-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.791. | |||||||
| 196 | CVE-2018-8298ChakraCore — ChakraCore Scripting Engine Type Confusion VulnerabilityKEV since 2022 · listed over a year | 77 | 7.5 | 74.7% · 99.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.747. | |||||||
| 197 | CVE-2018-18325DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityKEV since 2021 · listed over a year | 77 | 7.5 | 74.0% · 99.48th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.740. | |||||||
| 198 | CVE-2019-2215Android — Android Kernel Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 77 | 7.8 | 72.1% · 99.43rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.721. | |||||||
| 199 | CVE-2012-1535Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 77 | 7.8 | 70.4% · 99.39th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
| 200 | CVE-2013-1690Mozilla — Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 69.0% · 99.35th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.690. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsVMware — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
EVRS 78 Urgent
Rank 176 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 5.3 NVD
- EPSS
- 88.0% 99.77th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-03-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
ownCloud — ownCloud graphapi Information Disclosure Vulnerability
EVRS 78 Urgent
Rank 177 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 78.4% 99.58th percentile
- In CISA KEV since
- 2023-11-30
- CISA deadline
- 2023-12-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- ownCloud
- Source
- CISA KEV
Pi-hole — Pi-Hole AdminLTE Remote Code Execution Vulnerability
EVRS 78 Urgent
Rank 178 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.2 NVD
- EPSS
- 78.3% 99.58th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Pi-hole
- Source
- CISA KEV
Delta Electronics — Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
EVRS 78 Urgent
Rank 179 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 76.4% 99.54th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Delta Electronics
- Source
- CISA KEV
DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
EVRS 78 Urgent
Rank 180 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 76.3% 99.54th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DotNetNuke (DNN)
- Source
- CISA KEV
SonicWall — SonicWall SMA100 Appliances OS Command Injection Vulnerability
EVRS 78 Urgent
Rank 181 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.2 NVD
- EPSS
- 76.2% 99.54th percentile
- In CISA KEV since
- 2025-05-01
- CISA deadline
- 2025-05-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple Multiple Products Integer Overflow Vulnerability
EVRS 78 Urgent
Rank 182 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 76.0% 99.53rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
NETGEAR — NETGEAR DGN2200 Devices OS Command Injection Vulnerability
EVRS 78 Urgent
Rank 183 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 72.6% 99.44th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Nagios — Nagios XI OS Command Injection
EVRS 78 Urgent
Rank 184 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 71.9% 99.43rd percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Denial of Service Vulnerability
EVRS 78 Urgent
Rank 185 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.6 NVD
- EPSS
- 70.7% 99.4th percentile
- In CISA KEV since
- 2024-04-24
- CISA deadline
- 2024-05-01 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium V8 Improper Input Validation Vulnerability
EVRS 78 Urgent
Rank 186 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 78 Urgent
Rank 187 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
D-Link — D-Link DSL-2750B Devices Command Injection Vulnerability
EVRS 78 Urgent
Rank 188 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 66.6% 99.29th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
EVRS 78 Urgent
Rank 189 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 66.6% 99.29th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Juniper — Juniper ScreenOS Improper Authentication Vulnerability
EVRS 78 Urgent
Rank 190 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.1% 99.16th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
AMI — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
EVRS 78 Urgent
Rank 191 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 10.0 NVD
- EPSS
- 60.7% 99.15th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- AMI
- Source
- CISA KEV
Sangoma — Sangoma FreePBX Improper Authentication Vulnerability
EVRS 78 Urgent
Rank 192 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.9% 99.05th percentile
- In CISA KEV since
- 2026-02-03
- CISA deadline
- 2026-02-24 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Sangoma
- Source
- CISA KEV
D-Link — D-Link Routers Buffer Overflow Vulnerability
EVRS 78 Urgent
Rank 193 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.5% 99.04th percentile
- In CISA KEV since
- 2025-12-08
- CISA deadline
- 2025-12-29 CISA federal deadline · Overdue by 10 months
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Juniper — Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
EVRS 77 Urgent
Rank 194 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 5.3 NVD
- EPSS
- 83.5% 99.69th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
TIBCO — TIBCO JasperReports Library Directory Traversal Vulnerability
EVRS 77 Urgent
Rank 195 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 6.5 NVD
- EPSS
- 79.1% 99.6th percentile
- In CISA KEV since
- 2022-12-29
- CISA deadline
- 2023-01-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TIBCO
- Source
- CISA KEV
ChakraCore — ChakraCore Scripting Engine Type Confusion Vulnerability
EVRS 77 Urgent
Rank 196 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- ChakraCore
- Source
- CISA KEV
DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
EVRS 77 Urgent
Rank 197 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.0% 99.48th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DotNetNuke (DNN)
- Source
- CISA KEV
Android — Android Kernel Use-After-Free Vulnerability
EVRS 77 Urgent
Rank 198 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 72.1% 99.43rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 77 Urgent
Rank 199 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 7.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
EVRS 77 Urgent
Rank 200 of 2,960 tracked · as of 22 Oct 18:24 UTC
- CVSS
- 8.8 NVD
- EPSS
- 69.0% 99.35th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
