Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 426 | CVE-2020-8260Ivanti — Ivanti Pulse Connect Secure Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 7.2 | 96.5% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.965. | |||||||
| 427 | CVE-2021-20124DrayTek — Draytek VigorConnect Path Traversal VulnerabilityKEV since 2024 · listed over a year | 83 | 7.5 | 96.3% · 99.88th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.963. | |||||||
| 428 | CVE-2019-20085TVT — TVT NVMS-1000 Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 83 | 7.5 | 96.1% · 99.88th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.961. | |||||||
| 429 | CVE-2017-3506Oracle — Oracle WebLogic Server OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 83 | 7.4 | 96.0% · 99.88th | 2024-06-03 | 2024-06-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.960. | |||||||
| 430 | CVE-2019-1652Cisco — Cisco Small Business Routers Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 83 | 7.2 | 95.9% · 99.88th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.959. | |||||||
| 431 | CVE-2020-5410VMware Tanzu — VMware Tanzu Spring Cloud Config Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 83 | 7.5 | 95.6% · 99.87th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.956. | |||||||
| 432 | CVE-2016-0752Rails — Ruby on Rails Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 83 | 7.5 | 95.5% · 99.87th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.955. | |||||||
| 433 | CVE-2023-38950ZKTeco — ZKTeco BioTime Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 7.5 | 92.5% · 99.83rd | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.925. | |||||||
| 434 | CVE-2019-6340Drupal — Drupal Core Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 83 | 8.1 | 92.0% · 99.82nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.920. | |||||||
| 435 | CVE-2024-13160Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 7.5 | 91.0% · 99.81st | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.910. | |||||||
| 436 | CVE-2025-20362Cisco — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization VulnerabilityKEV since 2025 · listed over a year | 83 | 8.6 | 87.1% · 99.75th | 2025-09-25 | 2025-09-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.871. | |||||||
| 437 | CVE-2021-31755Tenda — Tenda AC11 Router Stack Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 86.5% · 99.74th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.865. | |||||||
| 438 | CVE-2019-4716IBM — IBM Planning Analytics Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 86.4% · 99.74th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.864. | |||||||
| 439 | CVE-2015-0311Adobe — Adobe Flash Player Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 85.6% · 99.73rd | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.856. | |||||||
| 440 | CVE-2019-10758MongoDB — MongoDB mongo-express Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 83 | 9.9 | 84.7% · 99.71st | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.847. | |||||||
| 441 | CVE-2024-28986SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 83 | 9.8 | 84.6% · 99.71st | 2024-08-15 | 2024-09-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 442 | CVE-2019-11581Atlassian — Atlassian Jira Server and Data Center Server-Side Template Injection VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.6% · 99.71st | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 443 | CVE-2020-15415DrayTek — DrayTek Multiple Vigor Routers OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 83 | 9.8 | 84.5% · 99.7th | 2024-09-30 | 2024-10-21KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.845. | |||||||
| 444 | CVE-2020-12641Roundcube — Roundcube Webmail Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 83 | 9.8 | 84.5% · 99.7th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.845. | |||||||
| 445 | CVE-2020-5722Grandstream — Grandstream Networks UCM6200 Series SQL Injection VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.4% · 99.7th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.844. | |||||||
| 446 | CVE-2017-11317Telerik — Telerik UI for ASP.NET AJAX Unrestricted File Upload VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 84.2% · 99.7th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.842. | |||||||
| 447 | CVE-2020-3161Cisco — Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service VulnerabilityKEV since 2021 · listed over a year | 83 | 9.8 | 83.9% · 99.69th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.839. | |||||||
| 448 | CVE-2016-10174NETGEAR — NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 83 | 9.8 | 83.3% · 99.68th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.833. | |||||||
| 449 | CVE-2024-42009Roundcube — RoundCube Webmail Cross-Site Scripting VulnerabilityKEV since 2025 · listed over a year | 83 | 9.3 | 82.9% · 99.67th | 2025-06-09 | 2025-06-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.829. | |||||||
| 450 | CVE-2024-0769D-Link — D-Link DIR-859 Router Path Traversal VulnerabilityKEV since 2025 · listed over a year | 83 | 9.8 | 82.7% · 99.67th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.827. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsIvanti — Ivanti Pulse Connect Secure Code Execution Vulnerability
EVRS 83 Urgent
Rank 426 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 96.5% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
DrayTek — Draytek VigorConnect Path Traversal Vulnerability
EVRS 83 Urgent
Rank 427 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 96.3% 99.88th percentile
- In CISA KEV since
- 2024-09-03
- CISA deadline
- 2024-09-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
TVT — TVT NVMS-1000 Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 428 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 96.1% 99.88th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- TVT
- Source
- CISA KEV
Oracle — Oracle WebLogic Server OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 429 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.4 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2024-06-03
- CISA deadline
- 2024-06-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Cisco — Cisco Small Business Routers Improper Input Validation Vulnerability
EVRS 83 Urgent
Rank 430 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 95.9% 99.88th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 431 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.6% 99.87th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
Rails — Ruby on Rails Directory Traversal Vulnerability
EVRS 83 Urgent
Rank 432 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.5% 99.87th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Rails
- Source
- CISA KEV
ZKTeco — ZKTeco BioTime Path Traversal Vulnerability
EVRS 83 Urgent
Rank 433 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 92.5% 99.83rd percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- ZKTeco
- Source
- CISA KEV
Drupal — Drupal Core Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 434 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 92.0% 99.82nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
EVRS 83 Urgent
Rank 435 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 91.0% 99.81st percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability
EVRS 83 Urgent
Rank 436 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.6 NVD
- EPSS
- 87.1% 99.75th percentile
- In CISA KEV since
- 2025-09-25
- CISA deadline
- 2025-09-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Tenda — Tenda AC11 Router Stack Buffer Overflow Vulnerability
EVRS 83 Urgent
Rank 437 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.5% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Tenda
- Source
- CISA KEV
IBM — IBM Planning Analytics Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 438 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.4% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Adobe — Adobe Flash Player Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 439 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 85.6% 99.73rd percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
MongoDB — MongoDB mongo-express Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 440 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.9 NVD
- EPSS
- 84.7% 99.71st percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- MongoDB
- Source
- CISA KEV
SolarWinds — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
EVRS 83 Urgent
Rank 441 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2024-08-15
- CISA deadline
- 2024-09-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- SolarWinds
- Source
- CISA KEV
Atlassian — Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability
EVRS 83 Urgent
Rank 442 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.6% 99.71st percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
DrayTek — DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
EVRS 83 Urgent
Rank 443 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.5% 99.7th percentile
- In CISA KEV since
- 2024-09-30
- CISA deadline
- 2024-10-21 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Roundcube — Roundcube Webmail Remote Code Execution Vulnerability
EVRS 83 Urgent
Rank 444 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.5% 99.7th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Grandstream — Grandstream Networks UCM6200 Series SQL Injection Vulnerability
EVRS 83 Urgent
Rank 445 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.4% 99.7th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Grandstream
- Source
- CISA KEV
Telerik — Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
EVRS 83 Urgent
Rank 446 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.2% 99.7th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Telerik
- Source
- CISA KEV
Cisco — Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability
EVRS 83 Urgent
Rank 447 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.9% 99.69th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
NETGEAR — NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
EVRS 83 Urgent
Rank 448 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 83.3% 99.68th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-Site Scripting Vulnerability
EVRS 83 Urgent
Rank 449 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.3 NVD
- EPSS
- 82.9% 99.67th percentile
- In CISA KEV since
- 2025-06-09
- CISA deadline
- 2025-06-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
D-Link — D-Link DIR-859 Router Path Traversal Vulnerability
EVRS 83 Urgent
Rank 450 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.7% 99.67th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
