Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
244 match · filtered from 2,956| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 151 | CVE-2018-4878Adobe — Adobe Flash Player Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 88 | 7.8 | 89.5% · 99.79th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 152 | CVE-2010-0188Adobe — Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 88 | 7.8 | 88.2% · 99.77th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 153 | CVE-2021-28799QNAP — QNAP NAS Improper Authorization VulnerabilityExigentKEV since 2022 · listed over a year | 88 | 9.8 | 78.2% · 99.58th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 154 | CVE-2017-11357Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityExigentKEV since 2023 · listed over a year | 88 | 9.8 | 77.7% · 99.57th | 2023-01-26 | 2023-02-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 155 | CVE-2024-57726SimpleHelp — SimpleHelp Missing Authorization VulnerabilityExigentCISA federal deadline · Overdue by 6 months | 88 | 9.9 | 66.4% · 99.29th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 156 | CVE-2009-3960Adobe — Adobe BlazeDS Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 87 | 6.5 | 90.1% · 99.8th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 157 | CVE-2023-27351PaperCut — PaperCut NG/MF Improper Authentication VulnerabilityCISA federal deadline · Overdue by 6 months | 87 | 7.5 | 78.1% · 99.58th | 2026-04-20 | 2026-05-04CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 158 | CVE-2021-42258BQE — BQE BillQuick Web Suite SQL Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 74.4% · 99.49th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 159 | CVE-2022-24990TerraMaster — TerraMaster OS Remote Command Execution VulnerabilityKEV since 2023 · listed over a year | 86 | 7.5 | 83.2% · 99.68th | 2023-02-10 | 2023-03-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 160 | CVE-2018-13382Fortinet — Fortinet FortiOS and FortiProxy Improper AuthorizationKEV since 2022 · listed over a year | 86 | 7.5 | 81.7% · 99.64th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 161 | CVE-2023-28461Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 68.1% · 99.33rd | 2024-11-25 | 2024-12-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 162 | CVE-2013-0431Oracle — Oracle JRE Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 85 | 5.3 | 90.1% · 99.8th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 163 | CVE-2020-3580Cisco — Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 85 | 6.1 | 85.6% · 99.73rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 164 | CVE-2023-41266Qlik — Qlik Sense Path Traversal VulnerabilityKEV since 2023 · listed over a year | 85 | 6.5 | 84.8% · 99.71st | 2023-12-07 | 2023-12-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 165 | CVE-2023-27532Veeam — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year | 85 | 7.5 | 80.6% · 99.63rd | 2023-08-22 | 2023-09-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 166 | CVE-2021-21975VMware — VMware Server Side Request Forgery in vRealize Operations Manager APIKEV since 2022 · listed over a year | 85 | 7.5 | 78.0% · 99.58th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 167 | CVE-2022-2294WebRTC — WebRTC Heap Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 70.8% · 99.4th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 168 | CVE-2021-27877Veritas — Veritas Backup Exec Agent Improper Authentication VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 64.9% · 99.25th | 2023-04-07 | 2023-04-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 169 | CVE-2021-27104Accellion — Accellion FTA OS Command Injection VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 56.7% · 99.06th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 170 | CVE-2022-29499Mitel — Mitel MiVoice Connect Data Validation VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 55.2% · 99.03rd | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 171 | CVE-2021-22941Citrix — Citrix ShareFile Improper Access Control VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 53.6% · 99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 172 | CVE-2023-48365Qlik — Qlik Sense HTTP Tunneling VulnerabilityExigentKEV since 2025 · listed over a year | 85 | 9.9 | 47.5% · 98.8th | 2025-01-13 | 2025-02-03KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 173 | CVE-2021-22893Ivanti — Ivanti Pulse Connect Secure Use-After-Free VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 10.0 | 47.2% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 174 | CVE-2026-12569PTC — PTC Windchill and FlexPLM Improper Input Validation VulnerabilityExigentCISA federal deadline · Overdue by 4 months | 85 | 9.3 | 46.0% · 98.8th | 2026-06-25 | 2026-06-28CISA federal deadline · Overdue by 4 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 175 | CVE-2020-12812Fortinet — Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 45.4% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 88 Immediate
Rank 151 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 89.5% 99.79th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
EVRS 88 Immediate
Rank 152 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
QNAP — QNAP NAS Improper Authorization Vulnerability
EVRS 88 Immediate
Rank 153 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.2% 99.58th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
EVRS 88 Immediate
Rank 154 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 77.7% 99.57th percentile
- In CISA KEV since
- 2023-01-26
- CISA deadline
- 2023-02-16 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Telerik
- Source
- CISA KEV
SimpleHelp — SimpleHelp Missing Authorization Vulnerability
EVRS 88 Immediate
Rank 155 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.9 NVD
- EPSS
- 66.4% 99.29th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Adobe — Adobe BlazeDS Information Disclosure Vulnerability
EVRS 87 Immediate
Rank 156 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 90.1% 99.8th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Improper Authentication Vulnerability
EVRS 87 Immediate
Rank 157 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 78.1% 99.58th percentile
- In CISA KEV since
- 2026-04-20
- CISA deadline
- 2026-05-04 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Known
- Vendor
- PaperCut
- Source
- CISA KEV
BQE — BQE BillQuick Web Suite SQL Injection Vulnerability
EVRS 87 Immediate
Rank 158 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.4% 99.49th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- BQE
- Source
- CISA KEV
TerraMaster — TerraMaster OS Remote Command Execution Vulnerability
EVRS 86 Immediate
Rank 159 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2023-02-10
- CISA deadline
- 2023-03-03 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- TerraMaster
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Improper Authorization
EVRS 86 Immediate
Rank 160 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 81.7% 99.64th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
EVRS 86 Immediate
Rank 161 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.1% 99.33rd percentile
- In CISA KEV since
- 2024-11-25
- CISA deadline
- 2024-12-16 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Array Networks
- Source
- CISA KEV
Oracle — Oracle JRE Sandbox Bypass Vulnerability
EVRS 85 Immediate
Rank 162 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 5.3 NVD
- EPSS
- 90.1% 99.8th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability
EVRS 85 Immediate
Rank 163 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.1 NVD
- EPSS
- 85.6% 99.73rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Qlik — Qlik Sense Path Traversal Vulnerability
EVRS 85 Immediate
Rank 164 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 6.5 NVD
- EPSS
- 84.8% 99.71st percentile
- In CISA KEV since
- 2023-12-07
- CISA deadline
- 2023-12-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Qlik
- Source
- CISA KEV
Veeam — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
EVRS 85 Immediate
Rank 165 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 80.6% 99.63rd percentile
- In CISA KEV since
- 2023-08-22
- CISA deadline
- 2023-09-12 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
VMware — VMware Server Side Request Forgery in vRealize Operations Manager API
EVRS 85 Immediate
Rank 166 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 78.0% 99.58th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
WebRTC — WebRTC Heap Buffer Overflow Vulnerability
EVRS 85 Immediate
Rank 167 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 70.8% 99.4th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- WebRTC
- Source
- CISA KEV
Veritas — Veritas Backup Exec Agent Improper Authentication Vulnerability
EVRS 85 Immediate
Rank 168 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 64.9% 99.25th percentile
- In CISA KEV since
- 2023-04-07
- CISA deadline
- 2023-04-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Veritas
- Source
- CISA KEV
Accellion — Accellion FTA OS Command Injection Vulnerability
EVRS 85 Immediate
Rank 169 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 56.7% 99.06th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
Mitel — Mitel MiVoice Connect Data Validation Vulnerability
EVRS 85 Immediate
Rank 170 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 55.2% 99.03rd percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Citrix — Citrix ShareFile Improper Access Control Vulnerability
EVRS 85 Immediate
Rank 171 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 53.6% 99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Qlik — Qlik Sense HTTP Tunneling Vulnerability
EVRS 85 Immediate
Rank 172 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.9 NVD
- EPSS
- 47.5% 98.8th percentile
- In CISA KEV since
- 2025-01-13
- CISA deadline
- 2025-02-03 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Qlik
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 173 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 47.2% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
PTC — PTC Windchill and FlexPLM Improper Input Validation Vulnerability
EVRS 85 Immediate
Rank 174 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.3 NVD
- EPSS
- 46.0% 98.8th percentile
- In CISA KEV since
- 2026-06-25
- CISA deadline
- 2026-06-28 CISA federal deadline · Overdue by 4 months
- Ransomware use
- Known
- Vendor
- PTC
- Source
- CISA KEV
Fortinet — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
EVRS 85 Immediate
Rank 175 of 2,956 tracked · as of 24 Oct 01:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 45.4% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
