Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

Ranked by EVRS

1,099 match · filtered from 2,960

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 251 to 275
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
251 CVE-2021-42258BQE — BQE BillQuick Web Suite SQL Injection VulnerabilityRansomwareExigentKEV since 2021 · listed over a year 87 9.8 74.4% · 99.49th 2021-11-03 2021-11-17KEV since 2021 · listed over a year
252 CVE-2023-1389TP-Link — TP-Link Archer AX-21 Command Injection VulnerabilityKEV since 2023 · listed over a year 86 8.8 100.0% · 99.99th 2023-05-01 2023-05-22KEV since 2023 · listed over a year
253 CVE-2023-4863Google — Google Chromium WebP Heap-Based Buffer Overflow VulnerabilityKEV since 2023 · listed over a year 86 8.8 100.0% · 99.98th 2023-09-13 2023-10-04KEV since 2023 · listed over a year
254 CVE-2024-4879ServiceNow — ServiceNow Improper Input Validation VulnerabilityExigentKEV since 2024 · listed over a year 86 9.3 100.0% · 99.98th 2024-07-29 2024-08-19KEV since 2024 · listed over a year
255 CVE-2024-29824Ivanti — Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityKEV since 2024 · listed over a year 86 8.8 99.9% · 99.97th 2024-10-02 2024-10-23KEV since 2024 · listed over a year
256 CVE-2016-6277NETGEAR — NETGEAR Multiple Routers Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.8% · 99.96th 2022-03-07 2022-09-07KEV since 2022 · listed over a year
257 CVE-2024-5217ServiceNow — ServiceNow Incomplete List of Disallowed Inputs VulnerabilityExigentKEV since 2024 · listed over a year 86 9.2 99.6% · 99.95th 2024-07-29 2024-08-19KEV since 2024 · listed over a year
258 CVE-2011-0611Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.4% · 99.94th 2022-03-03 2022-03-24KEV since 2022 · listed over a year
259 CVE-2020-11978Apache — Apache Airflow Command InjectionKEV since 2022 · listed over a year 86 8.8 99.2% · 99.94th 2022-01-18 2022-07-18KEV since 2022 · listed over a year
260 CVE-2022-36804Atlassian — Atlassian Bitbucket Server and Data Center Command Injection VulnerabilityKEV since 2022 · listed over a year 86 8.8 99.2% · 99.94th 2022-09-30 2022-10-21KEV since 2022 · listed over a year
261 CVE-2012-3152Oracle — Oracle Fusion Middleware Unspecified VulnerabilityExigentKEV since 2021 · listed over a year 86 9.1 98.8% · 99.93rd 2021-11-03 2022-05-03KEV since 2021 · listed over a year
262 CVE-2024-8963Ivanti — Ivanti Cloud Services Appliance (CSA) Path Traversal VulnerabilityExigentKEV since 2024 · listed over a year 86 9.1 98.6% · 99.92nd 2024-09-19 2024-10-10KEV since 2024 · listed over a year
263 CVE-2025-0108Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityKEV since 2025 · listed over a year 86 8.8 98.5% · 99.92nd 2025-02-18 2025-03-11KEV since 2025 · listed over a year
264 CVE-2023-25280D-Link — D-Link DIR-820 Router OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.9% · 99.91st 2024-09-30 2024-10-21KEV since 2024 · listed over a year
265 CVE-2021-45382D-Link — D-Link Multiple Routers Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 86 9.8 97.8% · 99.91st 2022-04-04 2022-04-25KEV since 2022 · listed over a year
266 CVE-2021-36380Sunhillo — Sunhillo SureLine OS Command Injection VulnerablityExigentKEV since 2024 · listed over a year 86 9.8 97.8% · 99.91st 2024-03-05 2024-03-26KEV since 2024 · listed over a year
267 CVE-2015-7450IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.ExigentKEV since 2022 · listed over a year 86 9.8 97.8% · 99.91st 2022-01-10 2022-07-10KEV since 2022 · listed over a year
268 CVE-2024-4358Progress — Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.5% · 99.9th 2024-06-13 2024-07-04KEV since 2024 · listed over a year
269 CVE-2023-27524Apache — Apache Superset Insecure Default Initialization of Resource VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.4% · 99.9th 2024-01-08 2024-01-29KEV since 2024 · listed over a year
270 CVE-2007-3010Alcatel — Alcatel OmniPCX Enterprise Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 86 9.8 97.4% · 99.9th 2022-04-15 2022-05-06KEV since 2022 · listed over a year
271 CVE-2023-24489Citrix — Citrix Content Collaboration ShareFile Improper Access Control VulnerabilityExigentKEV since 2023 · listed over a year 86 9.8 97.3% · 99.9th 2023-08-16 2023-09-06KEV since 2023 · listed over a year
272 CVE-2020-25213WordPress — WordPress File Manager Plugin Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 86 9.8 97.3% · 99.9th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
273 CVE-2020-2555Oracle — Oracle Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 86 9.8 97.1% · 99.89th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
274 CVE-2019-7256Nice — Nice Linear eMerge E3-Series OS Command Injection VulnerabilityExigentKEV since 2024 · listed over a year 86 9.8 97.1% · 99.89th 2024-03-25 2024-04-15KEV since 2024 · listed over a year
275 CVE-2019-1003030Jenkins — Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 86 9.9 97.1% · 99.89th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
Showing 251–275 of 1,099

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics