Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
244 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 126 | CVE-2023-41265Qlik — Qlik Sense HTTP Tunneling VulnerabilityExigentKEV since 2023 · listed over a year | 91 | 9.9 | 88.2% · 99.77th | 2023-12-07 | 2023-12-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 127 | CVE-2019-7192QNAP — QNAP Photo Station Improper Access Control VulnerabilityExigentKEV since 2022 · listed over a year | 91 | 9.8 | 88.1% · 99.77th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 128 | CVE-2024-51567CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityExigentKEV since 2024 · listed over a year | 91 | 9.8 | 84.4% · 99.7th | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 129 | CVE-2023-0669Fortra — Fortra GoAnywhere MFT Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 90 | 7.2 | 100.0% · 99.99th | 2023-02-10 | 2023-03-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 130 | CVE-2022-30333RARLAB — RARLAB UnRAR Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 90 | 7.5 | 99.2% · 99.94th | 2022-08-09 | 2022-08-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 131 | CVE-2022-27925Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKEV since 2022 · listed over a year | 90 | 7.2 | 98.7% · 99.92nd | 2022-08-11 | 2022-09-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 132 | CVE-2019-11539Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityKEV since 2021 · listed over a year | 90 | 7.2 | 98.5% · 99.92nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 133 | CVE-2018-20250RARLAB — WinRAR Absolute Path Traversal VulnerabilityKEV since 2022 · listed over a year | 90 | 7.8 | 96.0% · 99.88th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 134 | CVE-2021-4034Red Hat — Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityKEV since 2022 · listed over a year | 90 | 7.8 | 94.9% · 99.86th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 135 | CVE-2023-40044Progress — Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year | 90 | 8.8 | 90.4% · 99.8th | 2023-10-05 | 2023-10-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 136 | CVE-2022-27593QNAP — QNAP Photo Station Externally Controlled Reference VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.1 | 87.9% · 99.77th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 137 | CVE-2017-18362Kaseya — Kaseya VSA SQL Injection VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.8 | 86.8% · 99.75th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 138 | CVE-2019-16057D-Link — D-Link DNS-320 Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.8 | 86.5% · 99.74th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 139 | CVE-2021-30116Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure VulnerabilityExigentKEV since 2021 · listed over a year | 90 | 9.8 | 85.7% · 99.73rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 140 | CVE-2023-27997Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityExigentKEV since 2023 · listed over a year | 90 | 9.8 | 85.7% · 99.73rd | 2023-06-13 | 2023-07-04KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 141 | CVE-2022-36537ZK Framework — ZK Framework AuUploader Unspecified VulnerabilityKEV since 2023 · listed over a year | 89 | 7.5 | 95.4% · 99.87th | 2023-02-27 | 2023-03-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 142 | CVE-2024-9474Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 89 | 6.9 | 94.8% · 99.86th | 2024-11-18 | 2024-12-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 143 | CVE-2022-27924Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityKEV since 2022 · listed over a year | 89 | 7.5 | 93.9% · 99.85th | 2022-08-04 | 2022-08-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 144 | CVE-2024-21762Fortinet — Fortinet FortiOS Out-of-Bound Write VulnerabilityExigentKEV since 2024 · listed over a year | 89 | 9.8 | 83.4% · 99.69th | 2024-02-09 | 2024-02-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 145 | CVE-2020-3992VMware — VMware ESXi OpenSLP Use-After-Free VulnerabilityExigentKEV since 2021 · listed over a year | 89 | 9.8 | 83.0% · 99.68th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 146 | CVE-2019-7194QNAP — QNAP Photo Station Path Traversal VulnerabilityExigentKEV since 2022 · listed over a year | 89 | 9.8 | 82.7% · 99.67th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 147 | CVE-2023-43208NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityExigentKEV since 2024 · listed over a year | 89 | 9.8 | 82.7% · 99.67th | 2024-05-20 | 2024-06-10KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 148 | CVE-2018-6789Exim — Exim Buffer Overflow VulnerabilityExigentKEV since 2021 · listed over a year | 89 | 9.8 | 82.1% · 99.66th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 149 | CVE-2021-26085Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read VulnerabilityKEV since 2022 · listed over a year | 88 | 5.3 | 99.9% · 99.97th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 150 | CVE-2018-15982Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 88 | 7.8 | 89.6% · 99.79th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsQlik — Qlik Sense HTTP Tunneling Vulnerability
EVRS 91 Immediate
Rank 126 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.9 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2023-12-07
- CISA deadline
- 2023-12-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Qlik
- Source
- CISA KEV
QNAP — QNAP Photo Station Improper Access Control Vulnerability
EVRS 91 Immediate
Rank 127 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.1% 99.77th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability
EVRS 91 Immediate
Rank 128 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.4% 99.7th percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- CyberPersons
- Source
- CISA KEV
Fortra — Fortra GoAnywhere MFT Remote Code Execution Vulnerability
EVRS 90 Immediate
Rank 129 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-02-10
- CISA deadline
- 2023-03-03 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortra
- Source
- CISA KEV
RARLAB — RARLAB UnRAR Directory Traversal Vulnerability
EVRS 90 Immediate
Rank 130 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.2% 99.94th percentile
- In CISA KEV since
- 2022-08-09
- CISA deadline
- 2022-08-30 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
EVRS 90 Immediate
Rank 131 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 98.7% 99.92nd percentile
- In CISA KEV since
- 2022-08-11
- CISA deadline
- 2022-09-01 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
EVRS 90 Immediate
Rank 132 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.2 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
RARLAB — WinRAR Absolute Path Traversal Vulnerability
EVRS 90 Immediate
Rank 133 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
Red Hat — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
EVRS 90 Immediate
Rank 134 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 94.9% 99.86th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Progress — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
EVRS 90 Immediate
Rank 135 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2023-10-05
- CISA deadline
- 2023-10-26 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Progress
- Source
- CISA KEV
QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability
EVRS 90 Immediate
Rank 136 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.1 NVD
- EPSS
- 87.9% 99.77th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Kaseya — Kaseya VSA SQL Injection Vulnerability
EVRS 90 Immediate
Rank 137 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.8% 99.75th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Kaseya
- Source
- CISA KEV
D-Link — D-Link DNS-320 Remote Code Execution Vulnerability
EVRS 90 Immediate
Rank 138 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.5% 99.74th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- D-Link
- Source
- CISA KEV
Kaseya — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
EVRS 90 Immediate
Rank 139 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 85.7% 99.73rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Kaseya
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
EVRS 90 Immediate
Rank 140 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 85.7% 99.73rd percentile
- In CISA KEV since
- 2023-06-13
- CISA deadline
- 2023-07-04 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
ZK Framework — ZK Framework AuUploader Unspecified Vulnerability
EVRS 89 Immediate
Rank 141 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.4% 99.87th percentile
- In CISA KEV since
- 2023-02-27
- CISA deadline
- 2023-03-20 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- ZK Framework
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
EVRS 89 Immediate
Rank 142 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.9 NVD
- EPSS
- 94.8% 99.86th percentile
- In CISA KEV since
- 2024-11-18
- CISA deadline
- 2024-12-09 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
EVRS 89 Immediate
Rank 143 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2022-08-04
- CISA deadline
- 2022-08-25 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Fortinet — Fortinet FortiOS Out-of-Bound Write Vulnerability
EVRS 89 Immediate
Rank 144 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.4% 99.69th percentile
- In CISA KEV since
- 2024-02-09
- CISA deadline
- 2024-02-16 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
VMware — VMware ESXi OpenSLP Use-After-Free Vulnerability
EVRS 89 Immediate
Rank 145 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.0% 99.68th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
QNAP — QNAP Photo Station Path Traversal Vulnerability
EVRS 89 Immediate
Rank 146 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
NextGen Healthcare — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
EVRS 89 Immediate
Rank 147 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2024-05-20
- CISA deadline
- 2024-06-10 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- NextGen Healthcare
- Source
- CISA KEV
Exim — Exim Buffer Overflow Vulnerability
EVRS 89 Immediate
Rank 148 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.1% 99.66th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Exim
- Source
- CISA KEV
Atlassian — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
EVRS 88 Immediate
Rank 149 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Atlassian
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 88 Immediate
Rank 150 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 89.6% 99.79th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
