Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
363 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 301 | CVE-2023-28461Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityRansomwareKEV since 2024 · listed over a year | 86 | 9.8 | 68.1% · 99.33rd | 2024-11-25 | 2024-12-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 302 | CVE-2018-14847MikroTik — MikroTik Router OS Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 85 | 9.1 | 96.0% · 99.88th | 2021-12-01 | 2022-06-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.960. | |||||||
| 303 | CVE-2017-1000486Primetek — Primetek Primefaces Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 94.1% · 99.85th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.941. | |||||||
| 304 | CVE-2015-5122Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 93.9% · 99.85th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
| 305 | CVE-2013-0625Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 93.8% · 99.84th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.938. | |||||||
| 306 | CVE-2013-0632Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 93.7% · 99.84th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.937. | |||||||
| 307 | CVE-2024-28987SolarWinds — SolarWinds Web Help Desk Hardcoded Credential VulnerabilityKEV since 2024 · listed over a year | 85 | 9.1 | 93.3% · 99.84th | 2024-10-15 | 2024-11-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 308 | CVE-2021-44077Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 93.3% · 99.84th | 2021-12-01 | 2021-12-15KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 309 | CVE-2016-4437Apache — Apache Shiro Code Execution VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 93.0% · 99.84th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 310 | CVE-2021-40870Aviatrix — Aviatrix Controller Unrestricted Upload of FileKEV since 2022 · listed over a year | 85 | 9.8 | 93.0% · 99.83rd | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 311 | CVE-2018-10561Dasan — Dasan GPON Routers Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 312 | CVE-2020-2551Oracle — Oracle Fusion Middleware Unspecified VulnerabilityKEV since 2023 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2023-11-16 | 2023-12-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 313 | CVE-2022-24706Apache — Apache CouchDB Insecure Default Initialization of Resource VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 92.5% · 99.83rd | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.925. | |||||||
| 314 | CVE-2016-3427Oracle — Oracle Java SE and JRockit Unspecified VulnerabilityKEV since 2023 · listed over a year | 85 | 9.8 | 92.3% · 99.83rd | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.923. | |||||||
| 315 | CVE-2017-5689Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 92.2% · 99.82nd | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.922. | |||||||
| 316 | CVE-2020-10148SolarWinds — SolarWinds Orion Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 92.0% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 317 | CVE-2020-8657EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 91.9% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.919. | |||||||
| 318 | CVE-2024-5910Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication VulnerabilityKEV since 2024 · listed over a year | 85 | 9.3 | 91.7% · 99.82nd | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.917. | |||||||
| 319 | CVE-2022-26258D-Link — D-Link DIR-820L Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 91.6% · 99.82nd | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.916. | |||||||
| 320 | CVE-2012-5076Oracle — Oracle Java SE Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 85 | 9.8 | 91.2% · 99.81st | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.912. | |||||||
| 321 | CVE-2021-32648October CMS — October CMS Improper AuthenticationKEV since 2022 · listed over a year | 85 | 9.1 | 90.4% · 99.8th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.904. | |||||||
| 322 | CVE-2020-3952VMware — VMware vCenter Server Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 90.4% · 99.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.904. | |||||||
| 323 | CVE-2016-8735Apache — Apache Tomcat Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 85 | 9.8 | 90.3% · 99.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.903. | |||||||
| 324 | CVE-2020-29583Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityKEV since 2021 · listed over a year | 85 | 9.8 | 90.2% · 99.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 325 | CVE-2021-27877Veritas — Veritas Backup Exec Agent Improper Authentication VulnerabilityRansomwareKEV since 2023 · listed over a year | 85 | 9.8 | 64.9% · 99.25th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsArray Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
EVRS 86 Immediate
Rank 301 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.1% 99.33rd percentile
- In CISA KEV since
- 2024-11-25
- CISA deadline
- 2024-12-16 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Array Networks
- Source
- CISA KEV
MikroTik — MikroTik Router OS Directory Traversal Vulnerability
EVRS 85 Immediate
Rank 302 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2022-06-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
Primetek — Primetek Primefaces Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 303 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.1% 99.85th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Primetek
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 304 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 305 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.8% 99.84th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 306 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.7% 99.84th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Hardcoded Credential Vulnerability
EVRS 85 Immediate
Rank 307 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2024-10-15
- CISA deadline
- 2024-11-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 308 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2021-12-15 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Apache — Apache Shiro Code Execution Vulnerability
EVRS 85 Immediate
Rank 309 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.84th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Aviatrix — Aviatrix Controller Unrestricted Upload of File
EVRS 85 Immediate
Rank 310 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Aviatrix
- Source
- CISA KEV
Dasan — Dasan GPON Routers Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 311 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dasan
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 85 Immediate
Rank 312 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2023-11-16
- CISA deadline
- 2023-12-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache CouchDB Insecure Default Initialization of Resource Vulnerability
EVRS 85 Immediate
Rank 313 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.5% 99.83rd percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle Java SE and JRockit Unspecified Vulnerability
EVRS 85 Immediate
Rank 314 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.3% 99.83rd percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
EVRS 85 Immediate
Rank 315 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.2% 99.82nd percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Intel
- Source
- CISA KEV
SolarWinds — SolarWinds Orion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 316 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
EVRS 85 Immediate
Rank 317 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- EyesOfNetwork
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication Vulnerability
EVRS 85 Immediate
Rank 318 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.7% 99.82nd percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
D-Link — D-Link DIR-820L Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 319 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.6% 99.82nd percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Oracle — Oracle Java SE Sandbox Bypass Vulnerability
EVRS 85 Immediate
Rank 320 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.2% 99.81st percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
October CMS — October CMS Improper Authentication
EVRS 85 Immediate
Rank 321 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- October CMS
- Source
- CISA KEV
VMware — VMware vCenter Server Information Disclosure Vulnerability
EVRS 85 Immediate
Rank 322 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Apache — Apache Tomcat Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 323 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.3% 99.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
EVRS 85 Immediate
Rank 324 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent Improper Authentication Vulnerability
EVRS 85 Immediate
Rank 325 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 64.9% 99.25th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
