Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 0 filters on

Ranked by EVRS

363 match · filtered from 2,956 Sort

All 25 rows on this page are CISA KEV Ransomware Exigent. Rows show only what differs.

Priority Feed, rows 76 to 100
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
76	CVE-2021-40539Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityKEV since 2021 · listed over a year	93	9.8	99.0% · 99.93rd	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
77	CVE-2023-47246SysAid — SysAid Server Path Traversal VulnerabilityKEV since 2023 · listed over a year	93	9.8	98.9% · 99.93rd	2023-11-13	2023-12-04KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
78	CVE-2013-2465Oracle — Oracle Java SE Unspecified VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.8% · 99.93rd	2022-03-28	2022-04-18KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
79	CVE-2012-4681Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.5% · 99.92nd	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
80	CVE-2023-48788Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityKEV since 2024 · listed over a year	93	9.8	98.4% · 99.92nd	2024-03-25	2024-04-15KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
81	CVE-2022-21587Oracle — Oracle E-Business Suite Unspecified VulnerabilityKEV since 2023 · listed over a year	93	9.8	98.3% · 99.92nd	2023-02-02	2023-02-23KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
82	CVE-2012-0507Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.2% · 99.92nd	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
83	CVE-2019-5544VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year	93	9.8	98.1% · 99.91st	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
84	CVE-2021-42237Sitecore — Sitecore XP Remote Command Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	97.6% · 99.9th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
85	CVE-2024-41713Mitel — Mitel MiCollab Path Traversal VulnerabilityKEV since 2025 · listed over a year	93	9.1	97.2% · 99.9th	2025-01-07	2025-01-28KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
86	CVE-2023-38203Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year	93	9.8	97.1% · 99.89th	2024-01-08	2024-01-29KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
87	CVE-2013-0422Oracle — Oracle JRE Remote Code Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	97.0% · 99.89th	2022-05-25	2022-06-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
88	CVE-2018-1273VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder VulnerabilityKEV since 2022 · listed over a year	93	9.8	97.0% · 99.89th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
89	CVE-2018-6530D-Link — D-Link Multiple Routers OS Command Injection VulnerabilityKEV since 2022 · listed over a year	93	9.8	96.7% · 99.89th	2022-09-08	2022-09-29KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
90	CVE-2023-46747F5 — F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityKEV since 2023 · listed over a year	93	9.8	96.5% · 99.88th	2023-10-31	2023-11-21KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
91	CVE-2022-41352Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKEV since 2022 · listed over a year	93	9.8	95.5% · 99.87th	2022-10-20	2022-11-10KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
92	CVE-2024-53704SonicWall — SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityKEV since 2025 · listed over a year	93	9.8	95.3% · 99.87th	2025-02-18	2025-03-11KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
93	CVE-2024-51378CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityKEV since 2024 · listed over a year	93	9.8	94.7% · 99.86th	2024-12-04	2024-12-25KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
94	CVE-2024-55591Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityKEV since 2025 · listed over a year	93	9.8	94.3% · 99.85th	2025-01-14	2025-01-21KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
95	CVE-2024-55956Cleo — Cleo Multiple Products Unauthenticated File Upload VulnerabilityKEV since 2024 · listed over a year	93	9.8	94.0% · 99.85th	2024-12-17	2025-01-07KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
96	CVE-2026-24423SmarterTools — SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityCISA federal deadline · Overdue by 8 months	93	9.3	88.2% · 99.77th	2026-02-05	2026-02-26CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
97	CVE-2025-52691SmarterTools — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityCISA federal deadline · Overdue by 8 months	93	10.0	85.7% · 99.73rd	2026-01-26	2026-02-16CISA federal deadline · Overdue by 8 months
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
98	CVE-2019-11580Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	92	9.8	95.4% · 99.87th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
99	CVE-2016-4117Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	92	9.8	94.4% · 99.85th	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
100	CVE-2012-1723Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	92	9.8	93.6% · 99.84th	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics