Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 1 filter on

Ranked by EVRS

1,100 match · filtered from 2,962 Sort

All 25 rows on this page are CISA KEV Ransomware. Rows show only what differs.

Priority Feed, rows 351 to 375
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
351	CVE-2020-3580Cisco — Cisco ASA and FTD Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year	85	6.1	85.6% · 99.72nd	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
352	CVE-2023-41266Qlik — Qlik Sense Path Traversal VulnerabilityKEV since 2023 · listed over a year	85	6.5	84.8% · 99.71st	2023-12-07	2023-12-28KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
353	CVE-2023-27532Veeam — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year	85	7.5	80.6% · 99.63rd	2023-08-22	2023-09-12KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
354	CVE-2021-21975VMware — VMware Server Side Request Forgery in vRealize Operations Manager APIKEV since 2022 · listed over a year	85	7.5	78.0% · 99.58th	2022-01-18	2022-02-01KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
355	CVE-2022-2294WebRTC — WebRTC Heap Buffer Overflow VulnerabilityKEV since 2022 · listed over a year	85	8.8	70.8% · 99.4th	2022-08-25	2022-09-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
356	CVE-2021-27877Veritas — Veritas Backup Exec Agent Improper Authentication VulnerabilityExigentKEV since 2023 · listed over a year	85	9.8	64.9% · 99.25th	2023-04-07	2023-04-28KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
357	CVE-2021-27104Accellion — Accellion FTA OS Command Injection VulnerabilityExigentKEV since 2021 · listed over a year	85	9.8	56.7% · 99.06th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
358	CVE-2022-29499Mitel — Mitel MiVoice Connect Data Validation VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	55.2% · 99.03rd	2022-06-27	2022-07-18KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
359	CVE-2021-22941Citrix — Citrix ShareFile Improper Access Control VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	53.6% · 99th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
360	CVE-2023-48365Qlik — Qlik Sense HTTP Tunneling VulnerabilityExigentKEV since 2025 · listed over a year	85	9.9	47.5% · 98.8th	2025-01-13	2025-02-03KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
361	CVE-2021-22893Ivanti — Ivanti Pulse Connect Secure Use-After-Free VulnerabilityExigentKEV since 2021 · listed over a year	85	10.0	47.2% · 98.8th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
362	CVE-2020-12812Fortinet — Fortinet FortiOS SSL VPN Improper Authentication VulnerabilityExigentKEV since 2021 · listed over a year	85	9.8	45.4% · 98.8th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
363	CVE-2020-12271Sophos — Sophos SFOS SQL Injection VulnerabilityExigentKEV since 2021 · listed over a year	85	9.8	42.4% · 98.7th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
364	CVE-2021-20016SonicWall — SonicWall SSLVPN SMA100 SQL Injection VulnerabilityExigentKEV since 2021 · listed over a year	85	9.8	40.0% · 98.6th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
365	CVE-2022-31199Netwrix — Netwrix Auditor Insecure Object Deserialization VulnerabilityExigentKEV since 2023 · listed over a year	85	9.8	36.0% · 98.5th	2023-07-11	2023-08-01KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
366	CVE-2018-19949QNAP — QNAP NAS File Station Command Injection VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	30.2% · 98.2nd	2022-05-24	2022-06-14KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
367	CVE-2021-20028SonicWall — SonicWall Secure Remote Access (SRA) SQL Injection VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	30.1% · 98.2nd	2022-03-28	2022-04-18KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
368	CVE-2018-20753Kaseya — Kaseya VSA Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	29.6% · 98.2nd	2022-04-13	2022-05-04KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
369	CVE-2020-5135SonicWall — SonicWall SonicOS Buffer Overflow VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	26.9% · 98th	2022-03-15	2022-04-05KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
370	CVE-2023-20269Cisco — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access VulnerabilityExigentKEV since 2023 · listed over a year	85	9.1	25.5% · 97.9th	2023-09-13	2023-10-04KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
371	CVE-2025-23006SonicWall — SonicWall SMA1000 Appliances Deserialization VulnerabilityExigentKEV since 2025 · listed over a year	85	9.8	23.4% · 97.8th	2025-01-24	2025-02-14KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
372	CVE-2024-9680Mozilla — Mozilla Firefox Use-After-Free VulnerabilityExigentKEV since 2024 · listed over a year	85	9.8	23.2% · 97.8th	2024-10-15	2024-11-05KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
373	CVE-2016-1019Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	22.3% · 97.7th	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
374	CVE-2024-40766SonicWall — SonicWall SonicOS Improper Access Control VulnerabilityExigentKEV since 2024 · listed over a year	85	9.8	18.4% · 97.2nd	2024-09-09	2024-09-30KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
375	CVE-2019-7193QNAP — QNAP QTS Improper Input Validation VulnerabilityExigentKEV since 2022 · listed over a year	85	9.8	14.4% · 96.6th	2022-06-08	2022-06-22KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics