Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 326 | CVE-2013-0625Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.8% · 99.84th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.938. | |||||||
| 327 | CVE-2013-0632Adobe — Adobe ColdFusion Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.6% · 99.84th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.936. | |||||||
| 328 | CVE-2025-4008Smartbedded — Smartbedded Meteobridge Command Injection VulnerabilityKEV since 2025 · listed over a year | 85 | 8.7 | 93.3% · 99.84th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 329 | CVE-2024-28987SolarWinds — SolarWinds Web Help Desk Hardcoded Credential VulnerabilityExigentKEV since 2024 · listed over a year | 85 | 9.1 | 93.3% · 99.84th | 2024-10-15 | 2024-11-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 330 | CVE-2021-44077Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 93.3% · 99.84th | 2021-12-01 | 2021-12-15KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.933. | |||||||
| 331 | CVE-2016-4437Apache — Apache Shiro Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 93.0% · 99.83rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 332 | CVE-2021-40870Aviatrix — Aviatrix Controller Unrestricted Upload of FileExigentKEV since 2022 · listed over a year | 85 | 9.8 | 93.0% · 99.83rd | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 333 | CVE-2018-10561Dasan — Dasan GPON Routers Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 334 | CVE-2020-2551Oracle — Oracle Fusion Middleware Unspecified VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 92.8% · 99.83rd | 2023-11-16 | 2023-12-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 335 | CVE-2022-24706Apache — Apache CouchDB Insecure Default Initialization of Resource VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.5% · 99.83rd | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.925. | |||||||
| 336 | CVE-2016-3427Oracle — Oracle Java SE and JRockit Unspecified VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 92.3% · 99.83rd | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.923. | |||||||
| 337 | CVE-2017-5689Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 92.2% · 99.82nd | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.922. | |||||||
| 338 | CVE-2020-10148SolarWinds — SolarWinds Orion Authentication Bypass VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 92.0% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 339 | CVE-2020-8657EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 91.9% · 99.82nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.919. | |||||||
| 340 | CVE-2024-5910Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication VulnerabilityExigentKEV since 2024 · listed over a year | 85 | 9.3 | 91.7% · 99.82nd | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.917. | |||||||
| 341 | CVE-2022-26258D-Link — D-Link DIR-820L Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 91.6% · 99.81st | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.916. | |||||||
| 342 | CVE-2012-5076Oracle — Oracle Java SE Sandbox Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 85 | 9.8 | 91.2% · 99.81st | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.912. | |||||||
| 343 | CVE-2021-32648October CMS — October CMS Improper AuthenticationExigentKEV since 2022 · listed over a year | 85 | 9.1 | 90.4% · 99.8th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.904. | |||||||
| 344 | CVE-2020-3952VMware — VMware vCenter Server Information Disclosure VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 90.4% · 99.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.904. | |||||||
| 345 | CVE-2016-8735Apache — Apache Tomcat Remote Code Execution VulnerabilityExigentKEV since 2023 · listed over a year | 85 | 9.8 | 90.3% · 99.8th | 2023-05-12 | 2023-06-02KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.903. | |||||||
| 346 | CVE-2020-29583Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials VulnerabilityExigentKEV since 2021 · listed over a year | 85 | 9.8 | 90.2% · 99.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 347 | CVE-2013-0431Oracle — Oracle JRE Sandbox Bypass VulnerabilityRansomwareKEV since 2022 · listed over a year | 85 | 5.3 | 90.1% · 99.8th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 348 | CVE-2025-54253Adobe — Adobe Experience Manager Forms Code Execution VulnerabilityKEV since 2025 · listed over a year | 85 | 10.0 | 88.3% · 99.77th | 2025-10-15 | 2025-11-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.883. | |||||||
| 349 | CVE-2024-58136Yiiframework — Yiiframework Yii Improper Protection of Alternate Path VulnerabilityKEV since 2025 · listed over a year | 85 | 9.8 | 87.8% · 99.76th | 2025-05-02 | 2025-05-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.878. | |||||||
| 350 | CVE-2024-12356BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection VulnerabilityKEV since 2024 · listed over a year | 85 | 9.8 | 87.3% · 99.75th | 2024-12-19 | 2024-12-27KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.873. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 326 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.8% 99.84th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 327 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.6% 99.84th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Smartbedded — Smartbedded Meteobridge Command Injection Vulnerability
EVRS 85 Immediate
Rank 328 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 8.7 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Smartbedded
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Hardcoded Credential Vulnerability
EVRS 85 Immediate
Rank 329 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.1 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2024-10-15
- CISA deadline
- 2024-11-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Zoho — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 330 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.3% 99.84th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2021-12-15 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Apache — Apache Shiro Code Execution Vulnerability
EVRS 85 Immediate
Rank 331 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Aviatrix — Aviatrix Controller Unrestricted Upload of File
EVRS 85 Immediate
Rank 332 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Aviatrix
- Source
- CISA KEV
Dasan — Dasan GPON Routers Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 333 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dasan
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 85 Immediate
Rank 334 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2023-11-16
- CISA deadline
- 2023-12-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache CouchDB Insecure Default Initialization of Resource Vulnerability
EVRS 85 Immediate
Rank 335 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.5% 99.83rd percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle Java SE and JRockit Unspecified Vulnerability
EVRS 85 Immediate
Rank 336 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.3% 99.83rd percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Intel — Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
EVRS 85 Immediate
Rank 337 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.2% 99.82nd percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Intel
- Source
- CISA KEV
SolarWinds — SolarWinds Orion Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 338 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
EyesOfNetwork — EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
EVRS 85 Immediate
Rank 339 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- EyesOfNetwork
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition Missing Authentication Vulnerability
EVRS 85 Immediate
Rank 340 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.3 NVD
- EPSS
- 91.7% 99.82nd percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
D-Link — D-Link DIR-820L Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 341 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.6% 99.81st percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Oracle — Oracle Java SE Sandbox Bypass Vulnerability
EVRS 85 Immediate
Rank 342 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.2% 99.81st percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
October CMS — October CMS Improper Authentication
EVRS 85 Immediate
Rank 343 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.1 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- October CMS
- Source
- CISA KEV
VMware — VMware vCenter Server Information Disclosure Vulnerability
EVRS 85 Immediate
Rank 344 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Apache — Apache Tomcat Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 345 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.3% 99.8th percentile
- In CISA KEV since
- 2023-05-12
- CISA deadline
- 2023-06-02 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Zyxel — Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
EVRS 85 Immediate
Rank 346 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Oracle — Oracle JRE Sandbox Bypass Vulnerability
EVRS 85 Immediate
Rank 347 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 5.3 NVD
- EPSS
- 90.1% 99.8th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe Experience Manager Forms Code Execution Vulnerability
EVRS 85 Immediate
Rank 348 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 10.0 NVD
- EPSS
- 88.3% 99.77th percentile
- In CISA KEV since
- 2025-10-15
- CISA deadline
- 2025-11-05 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Yiiframework — Yiiframework Yii Improper Protection of Alternate Path Vulnerability
EVRS 85 Immediate
Rank 349 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 87.8% 99.76th percentile
- In CISA KEV since
- 2025-05-02
- CISA deadline
- 2025-05-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Yiiframework
- Source
- CISA KEV
BeyondTrust — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
EVRS 85 Immediate
Rank 350 of 2,962 tracked · as of 22 Oct 23:45 UTC
- CVSS
- 9.8 NVD
- EPSS
- 87.3% 99.75th percentile
- In CISA KEV since
- 2024-12-19
- CISA deadline
- 2024-12-27 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- BeyondTrust
- Source
- CISA KEV
