Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 0 filters on

Ranked by EVRS

363 match · filtered from 2,956 Sort

All 25 rows on this page are CISA KEV Exigent. Rows show only what differs.

Priority Feed, rows 51 to 75
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
51	CVE-2019-3396Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityRansomwareKEV since 2021 · listed over a year	94	9.8	99.9% · 99.97th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
52	CVE-2021-20038SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.9% · 99.97th	2022-01-28	2022-02-11KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
53	CVE-2021-22986F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year	94	9.8	99.9% · 99.97th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
54	CVE-2023-46604Apache — Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityRansomwareKEV since 2023 · listed over a year	94	9.8	99.9% · 99.97th	2023-11-02	2023-11-23KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
55	CVE-2021-21972VMware — VMware vCenter Server Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year	94	9.8	99.9% · 99.96th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
56	CVE-2024-0012Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityRansomwareKEV since 2024 · listed over a year	94	9.3	99.9% · 99.96th	2024-11-18	2024-12-09KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
57	CVE-2022-47966Zoho — Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityRansomwareKEV since 2023 · listed over a year	94	9.8	99.8% · 99.95th	2023-01-23	2023-02-13KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
58	CVE-2023-3519Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityRansomwareKEV since 2023 · listed over a year	94	9.8	99.7% · 99.95th	2023-07-19	2023-08-09KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
59	CVE-2019-11043PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
60	CVE-2010-2861Adobe — Adobe ColdFusion Directory Traversal VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
61	CVE-2019-18935Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityRansomwareKEV since 2021 · listed over a year	94	9.8	99.7% · 99.95th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
62	CVE-2021-22205GitLab — GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityRansomwareKEV since 2021 · listed over a year	94	10.0	99.7% · 99.95th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
63	CVE-2019-15107Webmin — Webmin Command Injection VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
64	CVE-2024-23692Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityRansomwareKEV since 2024 · listed over a year	94	9.8	99.5% · 99.94th	2024-07-09	2024-07-30KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
65	CVE-2022-42475Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.5% · 99.94th	2022-12-13	2023-01-03KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
66	CVE-2017-7494Samba — Samba Remote Code Execution VulnerabilityRansomwareKEV since 2023 · listed over a year	94	9.8	99.4% · 99.94th	2023-03-30	2023-04-20KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
67	CVE-2023-22515Atlassian — Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityRansomwareKEV since 2023 · listed over a year	94	9.8	99.2% · 99.94th	2023-10-05	2023-10-13KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
68	CVE-2018-7602Drupal — Drupal Core Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year	94	9.8	99.2% · 99.94th	2022-04-13	2022-05-04KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
69	CVE-2024-50623Cleo — Cleo Multiple Products Unrestricted File Upload VulnerabilityRansomwareKEV since 2024 · listed over a year	94	9.8	98.6% · 99.92nd	2024-12-13	2025-01-03KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
70	CVE-2025-26399SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityRansomwareCISA federal deadline · Overdue by 7 months	94	9.8	90.1% · 99.8th	2026-03-09	2026-03-12CISA federal deadline · Overdue by 7 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
71	CVE-2021-40438Apache — Apache HTTP Server-Side Request Forgery (SSRF)RansomwareKEV since 2021 · listed over a year	93	9.0	100.0% · 99.99th	2021-12-01	2021-12-15KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
72	CVE-2024-21887Ivanti — Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityRansomwareKEV since 2024 · listed over a year	93	9.1	100.0% · 99.99th	2024-01-10	2024-01-22KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
73	CVE-2021-45046Apache — Apache Log4j2 Deserialization of Untrusted Data VulnerabilityRansomwareKEV since 2023 · listed over a year	93	9.0	100.0% · 99.98th	2023-05-01	2023-05-22KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
74	CVE-2015-3306ProFTPD — ProFTPD Improper Access Control VulnerabilityCISA federal deadline · Overdue by 13 days	93	10.0	99.5% · 99.95th	2026-10-08	2026-10-11CISA federal deadline · Overdue by 13 days
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. Open CVE page NVD CISA KEV Vendor Advisory
75	CVE-2021-44529Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityRansomwareKEV since 2024 · listed over a year	93	9.8	99.1% · 99.93rd	2024-03-25	2024-04-15KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics