Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
244 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 226 | CVE-2018-19943QNAP — QNAP NAS File Station Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 22.7% · 97.7th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 227 | CVE-2019-5591Fortinet — Fortinet FortiOS Default Configuration VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 18.6% · 97.3rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 228 | CVE-2021-20022SonicWall — SonicWall Email Security Unrestricted Upload of File VulnerabilityKEV since 2021 · listed over a year | 75 | 7.2 | 16.6% · 97th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 229 | CVE-2021-27876Veritas — Veritas Backup Exec Agent File Access VulnerabilityKEV since 2023 · listed over a year | 75 | 8.1 | 13.5% · 96.4th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 230 | CVE-2026-15410SonicWall — SonicWall SMA1000 Appliances Code Injection VulnerabilityCISA federal deadline · Overdue by 3 months | 75 | 7.2 | 11.8% · 96.1st | 2026-07-14 | 2026-07-17CISA federal deadline · Overdue by 3 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 231 | CVE-2017-1000253Linux — Linux Kernel PIE Stack Buffer Corruption VulnerabilityKEV since 2024 · listed over a year | 75 | 7.8 | 10.7% · 95.8th | 2024-09-09 | 2024-09-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 232 | CVE-2022-41223Mitel — Mitel MiVoice Connect Code Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 6.8 | 10.7% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 233 | CVE-2022-40765Mitel — Mitel MiVoice Connect Command Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 6.8 | 10.6% · 95.8th | 2023-02-21 | 2023-03-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 234 | CVE-2020-3433Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 10.0% · 95.6th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 235 | CVE-2015-2291Intel — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 9.0% · 95.3rd | 2023-02-10 | 2023-03-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 236 | CVE-2025-24472Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityKEV since 2025 · listed over a year | 75 | 8.1 | 7.2% · 94.3rd | 2025-03-18 | 2025-04-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 237 | CVE-2019-6693Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityKEV since 2025 · listed over a year | 75 | 6.5 | 6.6% · 93.9th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 238 | CVE-2022-26500Veeam — Veeam Backup & Replication Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 5.8% · 93.1st | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 239 | CVE-2013-3993IBM — IBM InfoSphere BigInsights Invalid Input VulnerabilityKEV since 2022 · listed over a year | 75 | 6.5 | 4.8% · 91.9th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 240 | CVE-2018-19321GIGABYTE — GIGABYTE Multiple Products Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.7% · 89.7th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 241 | CVE-2021-27102Accellion — Accellion FTA OS Command Injection VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 3.7% · 89.6th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 242 | CVE-2018-19320GIGABYTE — GIGABYTE Multiple Products Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 3.6% · 89.4th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 243 | CVE-2018-19322GIGABYTE — GIGABYTE Multiple Products Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 1.8% · 78.5th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 244 | CVE-2025-22225VMware — VMware ESXi Arbitrary Write VulnerabilityKEV since 2025 · listed over a year | 75 | 8.2 | 1.0% · 63rd | 2025-03-04 | 2025-03-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsQNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 226 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.4 NVD
- EPSS
- 22.7% 97.7th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Default Configuration Vulnerability
EVRS 75 Urgent
Rank 227 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 18.6% 97.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
SonicWall — SonicWall Email Security Unrestricted Upload of File Vulnerability
EVRS 75 Urgent
Rank 228 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 16.6% 97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent File Access Vulnerability
EVRS 75 Urgent
Rank 229 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.1 NVD
- EPSS
- 13.5% 96.4th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
SonicWall — SonicWall SMA1000 Appliances Code Injection Vulnerability
EVRS 75 Urgent
Rank 230 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 11.8% 96.1st percentile
- In CISA KEV since
- 2026-07-14
- CISA deadline
- 2026-07-17 CISA federal deadline · Overdue by 3 months
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Linux — Linux Kernel PIE Stack Buffer Corruption Vulnerability
EVRS 75 Urgent
Rank 231 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2024-09-09
- CISA deadline
- 2024-09-30 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Linux
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Code Injection Vulnerability
EVRS 75 Urgent
Rank 232 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.8 NVD
- EPSS
- 10.7% 95.8th percentile
- In CISA KEV since
- 2023-02-21
- CISA deadline
- 2023-03-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Command Injection Vulnerability
EVRS 75 Urgent
Rank 233 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.8 NVD
- EPSS
- 10.6% 95.8th percentile
- In CISA KEV since
- 2023-02-21
- CISA deadline
- 2023-03-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Cisco — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
EVRS 75 Urgent
Rank 234 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 10.0% 95.6th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Intel — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 235 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 9.0% 95.3rd percentile
- In CISA KEV since
- 2023-02-10
- CISA deadline
- 2023-03-03 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Intel
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 236 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.1 NVD
- EPSS
- 7.2% 94.3rd percentile
- In CISA KEV since
- 2025-03-18
- CISA deadline
- 2025-04-08 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
EVRS 75 Urgent
Rank 237 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 6.6% 93.9th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 238 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 5.8% 93.1st percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
IBM — IBM InfoSphere BigInsights Invalid Input Vulnerability
EVRS 75 Urgent
Rank 239 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 4.8% 91.9th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- IBM
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 240 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.7% 89.7th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
Accellion — Accellion FTA OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 241 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.7% 89.6th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Unspecified Vulnerability
EVRS 75 Urgent
Rank 242 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 3.6% 89.4th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Code Execution Vulnerability
EVRS 75 Urgent
Rank 243 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 1.8% 78.5th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
VMware — VMware ESXi Arbitrary Write Vulnerability
EVRS 75 Urgent
Rank 244 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.2 NVD
- EPSS
- 1.0% 63rd percentile
- In CISA KEV since
- 2025-03-04
- CISA deadline
- 2025-03-25 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
