Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 376 | CVE-2025-42999SAP — SAP NetWeaver Deserialization VulnerabilityRansomwareExigentKEV since 2025 · listed over a year | 85 | 9.1 | 12.9% · 96.3rd | 2025-05-15 | 2025-06-05KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 377 | CVE-2021-27103Accellion — Accellion FTA Server-Side Request Forgery (SSRF) VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 85 | 9.8 | 11.4% · 96th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 378 | CVE-2018-19323GIGABYTE — GIGABYTE Multiple Products Privilege Escalation VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 85 | 9.8 | 8.4% · 95th | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 379 | CVE-2019-11634Citrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 85 | 9.8 | 8.1% · 94.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 380 | CVE-2012-1710Oracle — Oracle Fusion Middleware Unspecified VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 85 | 9.8 | 7.8% · 94.7th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 381 | CVE-2021-27101Accellion — Accellion FTA SQL Injection VulnerabilityRansomwareExigentKEV since 2021 · listed over a year | 85 | 9.8 | 6.0% · 93.3rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 382 | CVE-2020-29574Sophos — CyberoamOS (CROS) SQL Injection VulnerabilityRansomwareExigentKEV since 2025 · listed over a year | 85 | 9.8 | 4.7% · 91.8th | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 383 | CVE-2020-2021Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 85 | 10.0 | 4.4% · 91.2nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 384 | CVE-2022-26501Veeam — Veeam Backup & Replication Remote Code Execution VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 85 | 9.8 | 4.1% · 90.7th | 2022-12-13 | 2023-01-03KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 385 | CVE-2024-11667Zyxel — Zyxel Multiple Firewalls Path Traversal VulnerabilityRansomwareExigentKEV since 2024 · listed over a year | 85 | 9.8 | 2.9% · 87th | 2024-12-03 | 2024-12-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 386 | CVE-2014-0160OpenSSL — OpenSSL Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2022-05-04 | 2022-05-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 387 | CVE-2023-32315Ignite Realtime — Ignite Realtime Openfire Path Traversal VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-08-24 | 2023-09-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 388 | CVE-2023-44487IETF — HTTP/2 Rapid Reset Attack VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2023-10-10 | 2023-10-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 389 | CVE-2020-3452Cisco — Cisco ASA and FTD Read-Only Path Traversal VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 390 | CVE-2021-22204Perl — ExifTool Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2021-11-17 | 2021-12-01KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 391 | CVE-2021-3156Sudo — Sudo Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 84 | 7.8 | 100.0% · 99.98th | 2022-04-06 | 2022-04-27KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 392 | CVE-2021-39226Grafana Labs — Grafana Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 84 | 7.3 | 99.9% · 99.97th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 393 | CVE-2018-0296Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 394 | CVE-2023-21839Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.9% · 99.97th | 2023-05-01 | 2023-05-22KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 395 | CVE-2019-1653Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 99.9% · 99.96th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 396 | CVE-2023-29298Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.96th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 397 | CVE-2023-38205Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2023 · listed over a year | 84 | 7.5 | 99.8% · 99.95th | 2023-07-20 | 2023-08-10KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 398 | CVE-2024-28995SolarWinds — SolarWinds Serv-U Path Traversal VulnerabilityKEV since 2024 · listed over a year | 84 | 7.5 | 99.6% · 99.95th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 399 | CVE-2019-17558Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 84 | 7.5 | 98.6% · 99.92nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.986. | |||||||
| 400 | CVE-2024-20767Adobe — Adobe ColdFusion Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 84 | 7.4 | 98.5% · 99.92nd | 2024-12-16 | 2025-01-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.985. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSAP — SAP NetWeaver Deserialization Vulnerability
EVRS 85 Immediate
Rank 376 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.1 NVD
- EPSS
- 12.9% 96.3rd percentile
- In CISA KEV since
- 2025-05-15
- CISA deadline
- 2025-06-05 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SAP
- Source
- CISA KEV
Accellion — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
EVRS 85 Immediate
Rank 377 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 11.4% 96th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
GIGABYTE — GIGABYTE Multiple Products Privilege Escalation Vulnerability
EVRS 85 Immediate
Rank 378 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 8.4% 95th percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- GIGABYTE
- Source
- CISA KEV
Citrix — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 379 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 8.1% 94.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Oracle — Oracle Fusion Middleware Unspecified Vulnerability
EVRS 85 Immediate
Rank 380 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 7.8% 94.7th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Accellion — Accellion FTA SQL Injection Vulnerability
EVRS 85 Immediate
Rank 381 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 6.0% 93.3rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Accellion
- Source
- CISA KEV
Sophos — CyberoamOS (CROS) SQL Injection Vulnerability
EVRS 85 Immediate
Rank 382 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.7% 91.8th percentile
- In CISA KEV since
- 2025-02-06
- CISA deadline
- 2025-02-27 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Sophos
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
EVRS 85 Immediate
Rank 383 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 10.0 NVD
- EPSS
- 4.4% 91.2nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Veeam — Veeam Backup & Replication Remote Code Execution Vulnerability
EVRS 85 Immediate
Rank 384 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 4.1% 90.7th percentile
- In CISA KEV since
- 2022-12-13
- CISA deadline
- 2023-01-03 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Path Traversal Vulnerability
EVRS 85 Immediate
Rank 385 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 9.8 NVD
- EPSS
- 2.9% 87th percentile
- In CISA KEV since
- 2024-12-03
- CISA deadline
- 2024-12-24 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
OpenSSL — OpenSSL Information Disclosure Vulnerability
EVRS 84 Urgent
Rank 386 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-05-04
- CISA deadline
- 2022-05-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- OpenSSL
- Source
- CISA KEV
Ignite Realtime — Ignite Realtime Openfire Path Traversal Vulnerability
EVRS 84 Urgent
Rank 387 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-08-24
- CISA deadline
- 2023-09-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ignite Realtime
- Source
- CISA KEV
IETF — HTTP/2 Rapid Reset Attack Vulnerability
EVRS 84 Urgent
Rank 388 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-10-10
- CISA deadline
- 2023-10-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- IETF
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Read-Only Path Traversal Vulnerability
EVRS 84 Urgent
Rank 389 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Perl — ExifTool Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 390 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-17
- CISA deadline
- 2021-12-01 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Perl
- Source
- CISA KEV
Sudo — Sudo Heap-Based Buffer Overflow Vulnerability
EVRS 84 Urgent
Rank 391 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-04-06
- CISA deadline
- 2022-04-27 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sudo
- Source
- CISA KEV
Grafana Labs — Grafana Authentication Bypass Vulnerability
EVRS 84 Urgent
Rank 392 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.3 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Grafana Labs
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
EVRS 84 Urgent
Rank 393 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 84 Urgent
Rank 394 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2023-05-01
- CISA deadline
- 2023-05-22 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
EVRS 84 Urgent
Rank 395 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 396 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2023-07-20
- CISA deadline
- 2023-08-10 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 397 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.8% 99.95th percentile
- In CISA KEV since
- 2023-07-20
- CISA deadline
- 2023-08-10 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Path Traversal Vulnerability
EVRS 84 Urgent
Rank 398 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Apache — Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
EVRS 84 Urgent
Rank 399 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.5 NVD
- EPSS
- 98.6% 99.92nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe ColdFusion Improper Access Control Vulnerability
EVRS 84 Urgent
Rank 400 of 2,962 tracked · as of 23 Oct 00:41 UTC
- CVSS
- 7.4 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2024-12-16
- CISA deadline
- 2025-01-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
