Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Ranked by EVRS

1,100 match · filtered from 2,962

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 401 to 425
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
401 CVE-2021-21311Adminer — Adminer Server-Side Request Forgery VulnerabilityKEV since 2025 · listed over a year 84 7.2 98.5% · 99.92nd 2025-09-29 2025-10-20KEV since 2025 · listed over a year
402 CVE-2024-12987DrayTek — DrayTek Vigor Routers OS Command Injection VulnerabilityKEV since 2025 · listed over a year 84 6.9 98.2% · 99.91st 2025-05-15 2025-06-05KEV since 2025 · listed over a year
403 CVE-2022-43769Hitachi Vantara — Hitachi Vantara Pentaho BA Server Special Element Injection VulnerabilityKEV since 2025 · listed over a year 84 7.2 97.7% · 99.91st 2025-03-03 2025-03-24KEV since 2025 · listed over a year
404 CVE-2020-25078D-Link — D-Link DCS-2530L and DCS-2670L Devices Unspecified VulnerabilityKEV since 2025 · listed over a year 84 7.5 97.5% · 99.9th 2025-08-05 2025-08-26KEV since 2025 · listed over a year
405 CVE-2021-41277Metabase — Metabase GeoJSON API Local File Inclusion VulnerabilityKEV since 2024 · listed over a year 84 7.5 97.2% · 99.9th 2024-11-12 2024-12-03KEV since 2024 · listed over a year
406 CVE-2017-17562Embedthis — Embedthis GoAhead Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 84 8.1 97.1% · 99.9th 2021-12-10 2022-06-10KEV since 2021 · listed over a year
407 CVE-2017-8291Artifex — Artifex Ghostscript Type Confusion VulnerabilityKEV since 2022 · listed over a year 84 7.8 97.0% · 99.89th 2022-05-24 2022-06-14KEV since 2022 · listed over a year
408 CVE-2019-20500D-Link — D-Link DWL-2600AP Access Point Command Injection VulnerabilityKEV since 2023 · listed over a year 84 7.8 96.7% · 99.89th 2023-06-29 2023-07-20KEV since 2023 · listed over a year
409 CVE-2017-12637SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2025 · listed over a year 84 7.5 95.1% · 99.87th 2025-03-19 2025-04-09KEV since 2025 · listed over a year
410 CVE-2022-33891Apache — Apache Spark Command Injection VulnerabilityKEV since 2023 · listed over a year 84 8.8 93.2% · 99.84th 2023-03-07 2023-03-28KEV since 2023 · listed over a year
411 CVE-2020-17463Fuel CMS — Fuel CMS SQL Injection VulnerabilityKEV since 2021 · listed over a year 84 9.8 89.7% · 99.79th 2021-12-10 2022-06-10KEV since 2021 · listed over a year
412 CVE-2019-17621D-Link — D-Link DIR-859 Router Command Execution VulnerabilityKEV since 2023 · listed over a year 84 9.8 89.6% · 99.79th 2023-06-29 2023-07-20KEV since 2023 · listed over a year
413 CVE-2018-14839LG — LG N1A1 NAS Remote Command Execution VulnerabilityKEV since 2022 · listed over a year 84 9.8 89.4% · 99.79th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
414 CVE-2011-2462Adobe — Adobe Reader and Acrobat Universal 3D Memory Corruption VulnerabilityKEV since 2022 · listed over a year 84 9.8 88.9% · 99.78th 2022-06-08 2022-06-22KEV since 2022 · listed over a year
415 CVE-2025-4428Ivanti — Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEV since 2025 · listed over a year 84 8.8 88.0% · 99.77th 2025-05-19 2025-06-09KEV since 2025 · listed over a year
416 CVE-2020-17496vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityKEV since 2021 · listed over a year 84 9.8 87.5% · 99.76th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
417 CVE-2022-26143Mitel — MiCollab, MiVoice Business Express Access Control VulnerabilityKEV since 2022 · listed over a year 84 9.8 87.3% · 99.76th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
418 CVE-2023-2868Barracuda Networks — Barracuda Networks ESG Appliance Improper Input Validation VulnerabilityKEV since 2023 · listed over a year 84 9.8 86.8% · 99.75th 2023-05-26 2023-06-16KEV since 2023 · listed over a year
419 CVE-2020-8644PlaySMS — PlaySMS Server-Side Template Injection VulnerabilityKEV since 2021 · listed over a year 84 9.8 86.7% · 99.74th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
420 CVE-2019-9874Sitecore — Sitecore CMS and Experience Platform (XP) Deserialization VulnerabilityKEV since 2025 · listed over a year 84 9.8 83.7% · 99.69th 2025-03-26 2025-04-16KEV since 2025 · listed over a year
421 CVE-2010-3765Mozilla — Mozilla Multiple Products Remote Code Execution VulnerabilityKEV since 2025 · listed over a year 84 9.8 83.2% · 99.68th 2025-10-06 2025-10-27KEV since 2025 · listed over a year
422 CVE-2020-11738WordPress — WordPress Snap Creek Duplicator Plugin File Download VulnerabilityKEV since 2021 · listed over a year 83 7.5 97.8% · 99.91st 2021-11-03 2022-05-03KEV since 2021 · listed over a year
423 CVE-2020-17519Apache — Apache Flink Improper Access Control VulnerabilityKEV since 2024 · listed over a year 83 7.5 97.8% · 99.91st 2024-05-23 2024-06-13KEV since 2024 · listed over a year
424 CVE-2020-14883Oracle — Oracle WebLogic Server Unspecified VulnerabilityKEV since 2021 · listed over a year 83 7.2 97.7% · 99.91st 2021-11-03 2022-05-03KEV since 2021 · listed over a year
425 CVE-2020-14864Oracle — Oracle Business Intelligence Enterprise Edition Path TransversalKEV since 2022 · listed over a year 83 7.5 97.2% · 99.9th 2022-01-18 2022-07-18KEV since 2022 · listed over a year
Showing 401–425 of 1,100

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics