Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
910 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 201 | CVE-2015-4495Mozilla — Mozilla Firefox Security Feature Bypass VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 68.6% · 99.34th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.686. | |||||||
| 202 | CVE-2015-8651Adobe — Adobe Flash Player Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 67.7% · 99.32nd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.677. | |||||||
| 203 | CVE-2016-4657Apple — Apple iOS Webkit Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 66.8% · 99.29th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.668. | |||||||
| 204 | CVE-2025-31125Vite — Vite Vitejs Improper Access Control VulnerabilityCISA federal deadline · Overdue by 8 months | 77 | 7.5 | 65.2% · 99.26th | 2026-01-22 | 2026-02-12CISA federal deadline · Overdue by 8 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.652. | |||||||
| 205 | CVE-2020-15999Google — Google Chrome FreeType Heap Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 77 | 9.6 | 63.9% · 99.22nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.639. | |||||||
| 206 | CVE-2022-21445Oracle — Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 77 | 9.8 | 62.5% · 99.19th | 2024-09-18 | 2024-10-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 207 | CVE-2018-4939Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year | 77 | 9.8 | 62.0% · 99.18th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.620. | |||||||
| 208 | CVE-2024-23113Fortinet — Fortinet Multiple Products Format String VulnerabilityKEV since 2024 · listed over a year | 77 | 9.8 | 61.7% · 99.17th | 2024-10-09 | 2024-10-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.617. | |||||||
| 209 | CVE-2021-22991F5 — F5 BIG-IP Traffic Management Microkernel Buffer OverflowKEV since 2022 · listed over a year | 77 | 9.8 | 61.1% · 99.16th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.611. | |||||||
| 210 | CVE-2018-7445MikroTik — MikroTik RouterOS Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 77 | 9.8 | 60.8% · 99.15th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.608. | |||||||
| 211 | CVE-2021-22175GitLab — GitLab Server-Side Request Forgery (SSRF) VulnerabilityCISA federal deadline · Overdue by 7 months | 77 | 9.8 | 53.4% · 99th | 2026-02-18 | 2026-03-11CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.534. | |||||||
| 212 | CVE-2019-1579Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 77 | 8.1 | 46.2% · 98.8th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 213 | CVE-2020-13965Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 76 | 6.1 | 76.6% · 99.54th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.766. | |||||||
| 214 | CVE-2024-37383Roundcube — RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 76 | 6.1 | 73.3% · 99.46th | 2024-10-24 | 2024-11-14KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.733. | |||||||
| 215 | CVE-2020-5741Plex — Plex Media Server Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 76 | 7.2 | 72.8% · 99.45th | 2023-03-10 | 2023-03-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.728. | |||||||
| 216 | CVE-2020-36193PEAR — PEAR Archive_Tar Improper Link Resolution VulnerabilityKEV since 2022 · listed over a year | 76 | 7.5 | 70.6% · 99.39th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.706. | |||||||
| 217 | CVE-2019-18426Meta Platforms — WhatsApp Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 76 | 8.2 | 67.9% · 99.32nd | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.679. | |||||||
| 218 | CVE-2025-04117-Zip — 7-Zip Mark of the Web Bypass VulnerabilityKEV since 2025 · listed over a year | 76 | 7.0 | 67.1% · 99.3rd | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.671. | |||||||
| 219 | CVE-2021-30551Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 76 | 8.8 | 64.7% · 99.24th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.647. | |||||||
| 220 | CVE-2015-4068Arcserve — Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 76 | 9.1 | 63.6% · 99.22nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.636. | |||||||
| 221 | CVE-2021-30632Google — Google Chromium V8 Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 76 | 8.8 | 63.2% · 99.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.632. | |||||||
| 222 | CVE-2020-4428IBM — IBM Data Risk Manager Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 76 | 9.1 | 61.7% · 99.17th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.617. | |||||||
| 223 | CVE-2025-53690Sitecore — Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 76 | 9.0 | 60.6% · 99.15th | 2025-09-04 | 2025-09-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.606. | |||||||
| 224 | CVE-2024-8956PTZOptics — PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 76 | 9.1 | 58.8% · 99.11st | 2024-11-04 | 2024-11-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.588. | |||||||
| 225 | CVE-2020-26919NETGEAR — Netgear JGS516PE Devices Missing Function Level Access Control VulnerabilityKEV since 2021 · listed over a year | 76 | 9.8 | 57.5% · 99.08th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.575. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMozilla — Mozilla Firefox Security Feature Bypass Vulnerability
EVRS 77 Urgent
Rank 201 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.8 NVD
- EPSS
- 68.6% 99.34th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Adobe — Adobe Flash Player Integer Overflow Vulnerability
EVRS 77 Urgent
Rank 202 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.8 NVD
- EPSS
- 67.7% 99.32nd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apple — Apple iOS Webkit Memory Corruption Vulnerability
EVRS 77 Urgent
Rank 203 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.8 NVD
- EPSS
- 66.8% 99.29th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Vite — Vite Vitejs Improper Access Control Vulnerability
EVRS 77 Urgent
Rank 204 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 7.5 NVD
- EPSS
- 65.2% 99.26th percentile
- In CISA KEV since
- 2026-01-22
- CISA deadline
- 2026-02-12 CISA federal deadline · Overdue by 8 months
- Ransomware use
- Not known
- Vendor
- Vite
- Source
- CISA KEV
Google — Google Chrome FreeType Heap Buffer Overflow Vulnerability
EVRS 77 Urgent
Rank 205 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.6 NVD
- EPSS
- 63.9% 99.22nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Oracle — Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
EVRS 77 Urgent
Rank 206 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2024-09-18
- CISA deadline
- 2024-10-09 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 77 Urgent
Rank 207 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 62.0% 99.18th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Format String Vulnerability
EVRS 77 Urgent
Rank 208 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.7% 99.17th percentile
- In CISA KEV since
- 2024-10-09
- CISA deadline
- 2024-10-30 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
F5 — F5 BIG-IP Traffic Management Microkernel Buffer Overflow
EVRS 77 Urgent
Rank 209 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.1% 99.16th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
EVRS 77 Urgent
Rank 210 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 60.8% 99.15th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
GitLab — GitLab Server-Side Request Forgery (SSRF) Vulnerability
EVRS 77 Urgent
Rank 211 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 53.4% 99th percentile
- In CISA KEV since
- 2026-02-18
- CISA deadline
- 2026-03-11 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- GitLab
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
EVRS 77 Urgent
Rank 212 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.1 NVD
- EPSS
- 46.2% 98.8th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 76 Urgent
Rank 213 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 6.1 NVD
- EPSS
- 76.6% 99.54th percentile
- In CISA KEV since
- 2024-06-26
- CISA deadline
- 2024-07-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 76 Urgent
Rank 214 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 6.1 NVD
- EPSS
- 73.3% 99.46th percentile
- In CISA KEV since
- 2024-10-24
- CISA deadline
- 2024-11-14 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Plex — Plex Media Server Remote Code Execution Vulnerability
EVRS 76 Urgent
Rank 215 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 7.2 NVD
- EPSS
- 72.8% 99.45th percentile
- In CISA KEV since
- 2023-03-10
- CISA deadline
- 2023-03-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
PEAR — PEAR Archive_Tar Improper Link Resolution Vulnerability
EVRS 76 Urgent
Rank 216 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 7.5 NVD
- EPSS
- 70.6% 99.39th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PEAR
- Source
- CISA KEV
Meta Platforms — WhatsApp Cross-Site Scripting Vulnerability
EVRS 76 Urgent
Rank 217 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.2 NVD
- EPSS
- 67.9% 99.32nd percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Meta Platforms
- Source
- CISA KEV
7-Zip — 7-Zip Mark of the Web Bypass Vulnerability
EVRS 76 Urgent
Rank 218 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 7.0 NVD
- EPSS
- 67.1% 99.3rd percentile
- In CISA KEV since
- 2025-02-06
- CISA deadline
- 2025-02-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- 7-Zip
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 76 Urgent
Rank 219 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.8 NVD
- EPSS
- 64.7% 99.24th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Arcserve — Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
EVRS 76 Urgent
Rank 220 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.1 NVD
- EPSS
- 63.6% 99.22nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arcserve
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Write Vulnerability
EVRS 76 Urgent
Rank 221 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 8.8 NVD
- EPSS
- 63.2% 99.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
IBM — IBM Data Risk Manager Remote Code Execution Vulnerability
EVRS 76 Urgent
Rank 222 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.1 NVD
- EPSS
- 61.7% 99.17th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Sitecore — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
EVRS 76 Urgent
Rank 223 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.0 NVD
- EPSS
- 60.6% 99.15th percentile
- In CISA KEV since
- 2025-09-04
- CISA deadline
- 2025-09-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sitecore
- Source
- CISA KEV
PTZOptics — PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
EVRS 76 Urgent
Rank 224 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.1 NVD
- EPSS
- 58.8% 99.11st percentile
- In CISA KEV since
- 2024-11-04
- CISA deadline
- 2024-11-25 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- PTZOptics
- Source
- CISA KEV
NETGEAR — Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
EVRS 76 Urgent
Rank 225 of 2,960 tracked · as of 22 Oct 20:42 UTC
- CVSS
- 9.8 NVD
- EPSS
- 57.5% 99.08th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
