Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 301 | CVE-2024-11680ProjectSend — ProjectSend Improper Authentication VulnerabilityExigentKEV since 2024 · listed over a year | 86 | 9.8 | 91.8% · 99.82nd | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.918. | |||||||
| 302 | CVE-2017-3066Adobe — Adobe ColdFusion Deserialization VulnerabilityExigentKEV since 2025 · listed over a year | 86 | 9.8 | 90.6% · 99.8th | 2025-02-24 | 2025-03-17KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.906. | |||||||
| 303 | CVE-2022-24990TerraMaster — TerraMaster OS Remote Command Execution VulnerabilityRansomwareKEV since 2023 · listed over a year | 86 | 7.5 | 83.2% · 99.68th | 2023-02-10 | 2023-03-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 304 | CVE-2018-13382Fortinet — Fortinet FortiOS and FortiProxy Improper AuthorizationRansomwareKEV since 2022 · listed over a year | 86 | 7.5 | 81.7% · 99.64th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 305 | CVE-2023-28461Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function VulnerabilityRansomwareExigentKEV since 2024 · listed over a year | 86 | 9.8 | 68.1% · 99.33rd | 2024-11-25 | 2024-12-16KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 306 | CVE-2018-11776Apache — Apache Struts Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 85 | 8.1 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 307 | CVE-2024-13159Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 85 | 7.5 | 100.0% · 99.99th | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 308 | CVE-2024-45195Apache — Apache OFBiz Forced Browsing VulnerabilityKEV since 2025 · listed over a year | 85 | 7.5 | 100.0% · 99.98th | 2025-02-04 | 2025-02-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 309 | CVE-2017-12617Apache — Apache Tomcat Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 8.1 | 100.0% · 99.98th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 310 | CVE-2025-4427Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass VulnerabilityKEV since 2025 · listed over a year | 85 | 7.5 | 99.9% · 99.97th | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 311 | CVE-2017-9805Apache — Apache Struts Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year | 85 | 8.1 | 99.4% · 99.94th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 312 | CVE-2020-10199Sonatype — Sonatype Nexus Repository Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 85 | 8.8 | 99.1% · 99.93rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.991. | |||||||
| 313 | CVE-2019-5418Rails — Rails Ruby on Rails Path Traversal VulnerabilityKEV since 2025 · listed over a year | 85 | 7.5 | 98.5% · 99.92nd | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
| 314 | CVE-2021-39144XStream — XStream Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 85 | 8.5 | 98.1% · 99.91st | 2023-03-10 | 2023-03-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.981. | |||||||
| 315 | CVE-2016-3714ImageMagick — ImageMagick Improper Input Validation VulnerabilityKEV since 2024 · listed over a year | 85 | 8.4 | 97.5% · 99.9th | 2024-09-09 | 2024-09-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.975. | |||||||
| 316 | CVE-2019-9082ThinkPHP — ThinkPHP Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 85 | 8.8 | 97.4% · 99.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.974. | |||||||
| 317 | CVE-2023-26360Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year | 85 | 8.6 | 97.3% · 99.9th | 2023-03-15 | 2023-04-05KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.973. | |||||||
| 318 | CVE-2020-1956Apache — Apache Kylin OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 97.3% · 99.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.973. | |||||||
| 319 | CVE-2015-2051D-Link — D-Link DIR-645 Router Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 97.1% · 99.89th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.971. | |||||||
| 320 | CVE-2019-3398Atlassian — Atlassian Confluence Server and Data Center Path Traversal VulnerabilityKEV since 2021 · listed over a year | 85 | 8.8 | 97.0% · 99.89th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.970. | |||||||
| 321 | CVE-2009-0927Adobe — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 85 | 8.8 | 96.6% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.966. | |||||||
| 322 | CVE-2018-14847MikroTik — MikroTik Router OS Directory Traversal VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.1 | 96.0% · 99.88th | 2021-12-01 | 2022-06-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.960. | |||||||
| 323 | CVE-2024-48248NAKIVO — NAKIVO Backup and Replication Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 85 | 8.6 | 94.4% · 99.85th | 2025-03-19 | 2025-04-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.944. | |||||||
| 324 | CVE-2017-1000486Primetek — Primetek Primefaces Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 94.1% · 99.85th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.941. | |||||||
| 325 | CVE-2015-5122Adobe — Adobe Flash Player Use-After-Free VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.9% · 99.85th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.939. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsProjectSend — ProjectSend Improper Authentication Vulnerability
EVRS 86 Immediate
Rank 301 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.8% 99.82nd percentile
- In CISA KEV since
- 2024-12-03
- CISA deadline
- 2024-12-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- ProjectSend
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization Vulnerability
EVRS 86 Immediate
Rank 302 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.6% 99.8th percentile
- In CISA KEV since
- 2025-02-24
- CISA deadline
- 2025-03-17 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
TerraMaster — TerraMaster OS Remote Command Execution Vulnerability
EVRS 86 Immediate
Rank 303 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2023-02-10
- CISA deadline
- 2023-03-03 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- TerraMaster
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Improper Authorization
EVRS 86 Immediate
Rank 304 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 81.7% 99.64th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Array Networks — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
EVRS 86 Immediate
Rank 305 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.1% 99.33rd percentile
- In CISA KEV since
- 2024-11-25
- CISA deadline
- 2024-12-16 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Array Networks
- Source
- CISA KEV
Apache — Apache Struts Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 306 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.1 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
EVRS 85 Immediate
Rank 307 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Apache — Apache OFBiz Forced Browsing Vulnerability
EVRS 85 Immediate
Rank 308 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2025-02-04
- CISA deadline
- 2025-02-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Apache — Apache Tomcat Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 309 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.1 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 310 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Apache — Apache Struts Deserialization of Untrusted Data Vulnerability
EVRS 85 Immediate
Rank 311 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.1 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Sonatype — Sonatype Nexus Repository Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 312 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.1% 99.93rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sonatype
- Source
- CISA KEV
Rails — Rails Ruby on Rails Path Traversal Vulnerability
EVRS 85 Immediate
Rank 313 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 7.5 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Rails
- Source
- CISA KEV
XStream — XStream Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 314 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.5 NVD
- EPSS
- 98.1% 99.91st percentile
- In CISA KEV since
- 2023-03-10
- CISA deadline
- 2023-03-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- XStream
- Source
- CISA KEV
ImageMagick — ImageMagick Improper Input Validation Vulnerability
EVRS 85 Immediate
Rank 315 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.4 NVD
- EPSS
- 97.5% 99.9th percentile
- In CISA KEV since
- 2024-09-09
- CISA deadline
- 2024-09-30 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- ImageMagick
- Source
- CISA KEV
ThinkPHP — ThinkPHP Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 316 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.4% 99.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ThinkPHP
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 85 Immediate
Rank 317 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.6 NVD
- EPSS
- 97.3% 99.9th percentile
- In CISA KEV since
- 2023-03-15
- CISA deadline
- 2023-04-05 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apache — Apache Kylin OS Command Injection Vulnerability
EVRS 85 Immediate
Rank 318 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.3% 99.9th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
D-Link — D-Link DIR-645 Router Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 319 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Atlassian — Atlassian Confluence Server and Data Center Path Traversal Vulnerability
EVRS 85 Immediate
Rank 320 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
Adobe — Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability
EVRS 85 Immediate
Rank 321 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.8 NVD
- EPSS
- 96.6% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
MikroTik — MikroTik Router OS Directory Traversal Vulnerability
EVRS 85 Immediate
Rank 322 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.1 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2022-06-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
NAKIVO — NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
EVRS 85 Immediate
Rank 323 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 8.6 NVD
- EPSS
- 94.4% 99.85th percentile
- In CISA KEV since
- 2025-03-19
- CISA deadline
- 2025-04-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- NAKIVO
- Source
- CISA KEV
Primetek — Primetek Primefaces Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 324 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.1% 99.85th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Primetek
- Source
- CISA KEV
Adobe — Adobe Flash Player Use-After-Free Vulnerability
EVRS 85 Immediate
Rank 325 of 2,962 tracked · as of 22 Oct 22:49 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.9% 99.85th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
