Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
363 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 251 | CVE-2025-47812Wing FTP Server — Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityKEV since 2025 · listed over a year | 87 | 10.0 | 93.9% · 99.85th | 2025-07-14 | 2025-08-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
| 252 | CVE-2025-24016Wazuh — Wazuh Server Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 87 | 9.9 | 93.8% · 99.85th | 2025-06-10 | 2025-07-01KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.938. | |||||||
| 253 | CVE-2025-34291Langflow — Langflow Origin Validation Error VulnerabilityCISA federal deadline · Overdue by 5 months | 87 | 9.4 | 92.8% · 99.83rd | 2026-05-21 | 2026-06-04CISA federal deadline · Overdue by 5 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 254 | CVE-2025-9242WatchGuard — WatchGuard Firebox Out-of-Bounds Write VulnerabilityCISA federal deadline · Overdue by 11 months | 87 | 9.3 | 91.8% · 99.82nd | 2025-11-12 | 2025-12-03CISA federal deadline · Overdue by 11 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 255 | CVE-2025-37164Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityCISA federal deadline · Overdue by 9 months | 87 | 9.8 | 90.2% · 99.8th | 2026-01-07 | 2026-01-28CISA federal deadline · Overdue by 9 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 256 | CVE-2021-42258BQE — BQE BillQuick Web Suite SQL Injection VulnerabilityRansomwareKEV since 2021 · listed over a year | 87 | 9.8 | 74.4% · 99.49th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 257 | CVE-2024-4879ServiceNow — ServiceNow Improper Input Validation VulnerabilityKEV since 2024 · listed over a year | 86 | 9.3 | 100.0% · 99.98th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 258 | CVE-2024-5217ServiceNow — ServiceNow Incomplete List of Disallowed Inputs VulnerabilityKEV since 2024 · listed over a year | 86 | 9.2 | 99.6% · 99.95th | 2024-07-29 | 2024-08-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 259 | CVE-2012-3152Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2021 · listed over a year | 86 | 9.1 | 98.8% · 99.93rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.988. | |||||||
| 260 | CVE-2024-8963Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityKEV since 2024 · listed over a year | 86 | 9.1 | 98.6% · 99.92nd | 2024-09-19 | 2024-10-10KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. | |||||||
| 261 | CVE-2023-25280D-Link — D-Link DIR-820 Router OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 97.9% · 99.91st | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.979. | |||||||
| 262 | CVE-2021-45382D-Link — D-Link Multiple Routers Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.978. | |||||||
| 263 | CVE-2021-36380Sunhillo — Sunhillo SureLine OS Command Injection VulnerablityKEV since 2024 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2024-03-05 | 2024-03-26KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.978. | |||||||
| 264 | CVE-2015-7450IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.KEV since 2022 · listed over a year | 86 | 9.8 | 97.8% · 99.91st | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.978. | |||||||
| 265 | CVE-2024-4358Progress — Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 97.5% · 99.9th | 2024-06-13 | 2024-07-04KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.975. | |||||||
| 266 | CVE-2023-27524Apache — Apache Superset Insecure Default Initialization of Resource VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 97.4% · 99.9th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.974. | |||||||
| 267 | CVE-2007-3010Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 97.4% · 99.9th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.974. | |||||||
| 268 | CVE-2023-24489Citrix — Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 86 | 9.8 | 97.3% · 99.9th | 2023-08-16 | 2023-09-06KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.973. | |||||||
| 269 | CVE-2020-25213WordPress — WordPress File Manager Plugin Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 97.3% · 99.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.973. | |||||||
| 270 | CVE-2020-2555Oracle — Oracle Multiple Products Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 97.1% · 99.89th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 271 | CVE-2019-7256Nice — Nice Linear eMerge E3-Series OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 86 | 9.8 | 97.1% · 99.89th | 2024-03-25 | 2024-04-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 272 | CVE-2019-1003030Jenkins — Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.9 | 97.1% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 273 | CVE-2025-5086Dassault Systèmes — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 86 | 9.0 | 96.9% · 99.89th | 2025-09-11 | 2025-10-02KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.969. | |||||||
| 274 | CVE-2020-25223Sophos — Sophos SG UTM Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 86 | 9.8 | 96.8% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.968. | |||||||
| 275 | CVE-2021-22502Micro Focus — Micro Focus Operation Bridge Report (OBR) Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 86 | 9.8 | 96.7% · 99.89th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.967. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsWing FTP Server — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
EVRS 87 Immediate
Rank 251 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 10.0 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2025-07-14
- CISA deadline
- 2025-08-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Wing FTP Server
- Source
- CISA KEV
Wazuh — Wazuh Server Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 252 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.9 NVD
- EPSS
- 93.8% 99.85th percentile
- In CISA KEV since
- 2025-06-10
- CISA deadline
- 2025-07-01 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Wazuh
- Source
- CISA KEV
Langflow — Langflow Origin Validation Error Vulnerability
EVRS 87 Immediate
Rank 253 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.4 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2026-05-21
- CISA deadline
- 2026-06-04 CISA federal deadline · Overdue by 5 months
- Ransomware use
- Not known
- Vendor
- Langflow
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox Out-of-Bounds Write Vulnerability
EVRS 87 Immediate
Rank 254 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.8% 99.82nd percentile
- In CISA KEV since
- 2025-11-12
- CISA deadline
- 2025-12-03 CISA federal deadline · Overdue by 11 months
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Hewlett Packard Enterprise (HPE) — Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability
EVRS 87 Immediate
Rank 255 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2026-01-07
- CISA deadline
- 2026-01-28 CISA federal deadline · Overdue by 9 months
- Ransomware use
- Not known
- Vendor
- Hewlett Packard Enterprise (HPE)
- Source
- CISA KEV
BQE — BQE BillQuick Web Suite SQL Injection Vulnerability
EVRS 87 Immediate
Rank 256 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.4% 99.49th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- BQE
- Source
- CISA KEV
ServiceNow — ServiceNow Improper Input Validation Vulnerability
EVRS 86 Immediate
Rank 257 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.3 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-07-29
- CISA deadline
- 2024-08-19 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- ServiceNow
- Source
- CISA KEV
ServiceNow — ServiceNow Incomplete List of Disallowed Inputs Vulnerability
EVRS 86 Immediate
Rank 258 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.2 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-07-29
- CISA deadline
- 2024-08-19 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- ServiceNow
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 86 Immediate
Rank 259 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.1 NVD
- EPSS
- 98.8% 99.93rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
EVRS 86 Immediate
Rank 260 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.1 NVD
- EPSS
- 98.6% 99.92nd percentile
- In CISA KEV since
- 2024-09-19
- CISA deadline
- 2024-10-10 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
D-Link — D-Link DIR-820 Router OS Command Injection Vulnerability
EVRS 86 Immediate
Rank 261 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.9% 99.91st percentile
- In CISA KEV since
- 2024-09-30
- CISA deadline
- 2024-10-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
D-Link — D-Link Multiple Routers Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 262 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.8% 99.91st percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Sunhillo — Sunhillo SureLine OS Command Injection Vulnerablity
EVRS 86 Immediate
Rank 263 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.8% 99.91st percentile
- In CISA KEV since
- 2024-03-05
- CISA deadline
- 2024-03-26 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sunhillo
- Source
- CISA KEV
IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
EVRS 86 Immediate
Rank 264 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.8% 99.91st percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Progress — Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
EVRS 86 Immediate
Rank 265 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.5% 99.9th percentile
- In CISA KEV since
- 2024-06-13
- CISA deadline
- 2024-07-04 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
Apache — Apache Superset Insecure Default Initialization of Resource Vulnerability
EVRS 86 Immediate
Rank 266 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.4% 99.9th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 267 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.4% 99.9th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Alcatel
- Source
- CISA KEV
Citrix — Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
EVRS 86 Immediate
Rank 268 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.3% 99.9th percentile
- In CISA KEV since
- 2023-08-16
- CISA deadline
- 2023-09-06 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
WordPress — WordPress File Manager Plugin Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 269 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.3% 99.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Oracle — Oracle Multiple Products Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 270 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Nice — Nice Linear eMerge E3-Series OS Command Injection Vulnerability
EVRS 86 Immediate
Rank 271 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2024-03-25
- CISA deadline
- 2024-04-15 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nice
- Source
- CISA KEV
Jenkins — Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 272 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.9 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
Dassault Systèmes — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
EVRS 86 Immediate
Rank 273 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.0 NVD
- EPSS
- 96.9% 99.89th percentile
- In CISA KEV since
- 2025-09-11
- CISA deadline
- 2025-10-02 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dassault Systèmes
- Source
- CISA KEV
Sophos — Sophos SG UTM Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 274 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.8% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Micro Focus — Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
EVRS 86 Immediate
Rank 275 of 2,956 tracked · as of 24 Oct 09:48 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Micro Focus
- Source
- CISA KEV
