Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 1 filter on

Ranked by EVRS

1,099 match · filtered from 2,960 Sort

All 25 rows on this page are CISA KEV Ransomware Exigent. Rows show only what differs.

Priority Feed, rows 1 to 25
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
1	CVE-2025-3248Langflow — Langflow Missing Authentication VulnerabilityKEV since 2025 · listed over a year	95	9.8	100.0% · 99.99th	2025-05-05	2025-05-26KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
2	CVE-2025-22457Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year	95	9.8	100.0% · 99.98th	2025-04-04	2025-04-11KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
3	CVE-2025-31161CrushFTP — CrushFTP Authentication Bypass VulnerabilityKEV since 2025 · listed over a year	95	9.8	100.0% · 99.98th	2025-04-07	2025-04-28KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
4	CVE-2025-10035Fortra — Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year	95	9.8	99.8% · 99.96th	2025-09-29	2025-10-20KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
5	CVE-2025-61882Oracle — Oracle E-Business Suite Unspecified VulnerabilityKEV since 2025 · listed over a year	95	9.8	99.7% · 99.95th	2025-10-06	2025-10-27KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
6	CVE-2025-31324SAP — SAP NetWeaver Unrestricted File Upload VulnerabilityKEV since 2025 · listed over a year	95	9.8	99.5% · 99.94th	2025-04-29	2025-05-20KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
7	CVE-2017-5638Apache — Apache Struts Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
8	CVE-2018-13379Fortinet — Fortinet FortiOS SSL VPN Path Traversal VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
9	CVE-2019-11510Ivanti — Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityKEV since 2021 · listed over a year	94	10.0	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
10	CVE-2019-19781Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
11	CVE-2020-5902F5 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
12	CVE-2021-21985VMware — VMware vCenter Server Improper Input Validation VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
13	CVE-2021-22005VMware — VMware vCenter Server File Upload VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
14	CVE-2021-26084Atlassian — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
15	CVE-2021-35464ForgeRock — ForgeRock Access Management (AM) Core Server Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
16	CVE-2021-44228Apache — Apache Log4j2 Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	10.0	100.0% · 99.99th	2021-12-10	2021-12-24KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
17	CVE-2022-26134Atlassian — Atlassian Confluence Server and Data Center Remote Code Execution VulnerabilityKEV since 2022 · listed over a year	94	9.8	100.0% · 99.99th	2022-06-02	2022-06-06KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
18	CVE-2022-29464WSO2 — WSO2 Multiple Products Unrestrictive Upload of File VulnerabilityKEV since 2022 · listed over a year	94	9.8	100.0% · 99.99th	2022-04-25	2022-05-16KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
19	CVE-2023-22518Atlassian — Atlassian Confluence Data Center and Server Improper Authorization VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.99th	2023-11-07	2023-11-28KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
20	CVE-2023-27350PaperCut — PaperCut MF/NG Improper Access Control VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.99th	2023-04-21	2023-05-12KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
21	CVE-2023-35078Ivanti — Ivanti Endpoint Manager Mobile Authentication Bypass VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.99th	2023-07-25	2023-08-15KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
22	CVE-2023-35082Ivanti — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass VulnerabilityKEV since 2024 · listed over a year	94	9.8	100.0% · 99.99th	2024-01-18	2024-02-08KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
23	CVE-2024-23897Jenkins — Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityKEV since 2024 · listed over a year	94	9.8	100.0% · 99.99th	2024-08-19	2024-09-09KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
24	CVE-2024-3400Palo Alto Networks — Palo Alto Networks PAN-OS Command Injection VulnerabilityKEV since 2024 · listed over a year	94	10.0	100.0% · 99.99th	2024-04-12	2024-04-19KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
25	CVE-2022-22954VMware — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection VulnerabilityKEV since 2022 · listed over a year	94	9.8	100.0% · 99.99th	2022-04-14	2022-05-05KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics