Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 451 | CVE-2020-3259Cisco — Cisco ASA and FTD Information Disclosure VulnerabilityRansomwareKEV since 2024 · listed over a year | 83 | 7.5 | 71.5% · 99.42nd | 2024-02-15 | 2024-03-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 452 | CVE-2021-26086Atlassian — Atlassian Jira Server and Data Center Path Traversal VulnerabilityKEV since 2024 · listed over a year | 82 | 5.3 | 100.0% · 99.99th | 2024-11-12 | 2024-12-03KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 453 | CVE-2020-5849Unraid — Unraid Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 82 | 7.5 | 93.2% · 99.84th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.932. | |||||||
| 454 | CVE-2023-20273Cisco — Cisco IOS XE Web UI Command Injection VulnerabilityKEV since 2023 · listed over a year | 82 | 7.2 | 93.0% · 99.83rd | 2023-10-23 | 2023-10-27KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.930. | |||||||
| 455 | CVE-2022-0847Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 82 | 7.8 | 92.8% · 99.83rd | 2022-04-25 | 2022-05-16KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.928. | |||||||
| 456 | CVE-2019-2616Oracle — Oracle BI Publisher Unauthorized Access VulnerabilityKEV since 2022 · listed over a year | 82 | 7.2 | 92.2% · 99.82nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.922. | |||||||
| 457 | CVE-2012-0754Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 82 | 8.1 | 91.1% · 99.81st | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.911. | |||||||
| 458 | CVE-2021-21315Npm package — System Information Library for Node.JS Command InjectionKEV since 2022 · listed over a year | 82 | 7.8 | 90.7% · 99.81st | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.907. | |||||||
| 459 | CVE-2024-13161Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal VulnerabilityKEV since 2025 · listed over a year | 82 | 7.5 | 89.8% · 99.79th | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.898. | |||||||
| 460 | CVE-2017-5521NETGEAR — NETGEAR Multiple Devices Exposure of Sensitive Information VulnerabilityKEV since 2022 · listed over a year | 82 | 8.1 | 89.4% · 99.79th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.894. | |||||||
| 461 | CVE-2014-3120Elastic — Elasticsearch Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 82 | 8.1 | 88.6% · 99.78th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.886. | |||||||
| 462 | CVE-2021-43798Grafana Labs — Grafana Path Traversal VulnerabilityKEV since 2025 · listed over a year | 82 | 7.5 | 88.5% · 99.78th | 2025-10-09 | 2025-10-30KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 463 | CVE-2016-6366Cisco — Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 82 | 8.8 | 87.6% · 99.76th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.876. | |||||||
| 464 | CVE-2021-21017Adobe — Adobe Acrobat and Reader Heap-based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 82 | 8.8 | 86.3% · 99.74th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.863. | |||||||
| 465 | CVE-2018-17463Google — Google Chromium V8 Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 82 | 8.8 | 84.6% · 99.7th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 466 | CVE-2021-21224Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 82 | 8.8 | 84.2% · 99.7th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.842. | |||||||
| 467 | CVE-2021-27561Yealink — Yealink Device Management Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2021 · listed over a year | 82 | 9.8 | 82.9% · 99.67th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.829. | |||||||
| 468 | CVE-2015-1187D-Link and TRENDnet — D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 82 | 9.8 | 82.9% · 99.67th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.829. | |||||||
| 469 | CVE-2023-27992Zyxel — Zyxel Multiple NAS Devices Command Injection VulnerabilityKEV since 2023 · listed over a year | 82 | 9.8 | 82.3% · 99.66th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.823. | |||||||
| 470 | CVE-2020-14871Oracle — Oracle Solaris and Zettabyte File System (ZFS) Unspecified VulnerabilityKEV since 2021 · listed over a year | 82 | 10.0 | 80.2% · 99.62nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.802. | |||||||
| 471 | CVE-2020-10987Tenda — Tenda AC1900 Router AC15 Model Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 82 | 9.8 | 79.8% · 99.61st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.798. | |||||||
| 472 | CVE-2013-4810Hewlett Packard (HP) — HP Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 82 | 9.8 | 79.5% · 99.61st | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.795. | |||||||
| 473 | CVE-2025-20337Cisco — Cisco Identity Services Engine Injection VulnerabilityKEV since 2025 · listed over a year | 82 | 10.0 | 74.5% · 99.5th | 2025-07-28 | 2025-08-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.745. | |||||||
| 474 | CVE-2015-7645Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 82 | 7.8 | 65.3% · 99.26th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 475 | CVE-2023-23752Joomla! — Joomla! Improper Access Control VulnerabilityKEV since 2024 · listed over a year | 81 | 5.3 | 99.8% · 99.96th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco ASA and FTD Information Disclosure Vulnerability
EVRS 83 Urgent
Rank 451 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 71.5% 99.42nd percentile
- In CISA KEV since
- 2024-02-15
- CISA deadline
- 2024-03-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Atlassian — Atlassian Jira Server and Data Center Path Traversal Vulnerability
EVRS 82 Urgent
Rank 452 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.3 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-11-12
- CISA deadline
- 2024-12-03 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Atlassian
- Source
- CISA KEV
Unraid — Unraid Authentication Bypass Vulnerability
EVRS 82 Urgent
Rank 453 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 93.2% 99.84th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Unraid
- Source
- CISA KEV
Cisco — Cisco IOS XE Web UI Command Injection Vulnerability
EVRS 82 Urgent
Rank 454 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2023-10-23
- CISA deadline
- 2023-10-27 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 82 Urgent
Rank 455 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 92.8% 99.83rd percentile
- In CISA KEV since
- 2022-04-25
- CISA deadline
- 2022-05-16 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Oracle — Oracle BI Publisher Unauthorized Access Vulnerability
EVRS 82 Urgent
Rank 456 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 92.2% 99.82nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 82 Urgent
Rank 457 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 91.1% 99.81st percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Npm package — System Information Library for Node.JS Command Injection
EVRS 82 Urgent
Rank 458 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 90.7% 99.81st percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Npm package
- Source
- CISA KEV
Ivanti — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
EVRS 82 Urgent
Rank 459 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 89.8% 99.79th percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
NETGEAR — NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
EVRS 82 Urgent
Rank 460 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 89.4% 99.79th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Elastic — Elasticsearch Remote Code Execution Vulnerability
EVRS 82 Urgent
Rank 461 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 88.6% 99.78th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Elastic
- Source
- CISA KEV
Grafana Labs — Grafana Path Traversal Vulnerability
EVRS 82 Urgent
Rank 462 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2025-10-09
- CISA deadline
- 2025-10-30 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Grafana Labs
- Source
- CISA KEV
Cisco — Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
EVRS 82 Urgent
Rank 463 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 87.6% 99.76th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability
EVRS 82 Urgent
Rank 464 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 86.3% 99.74th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Google — Google Chromium V8 Remote Code Execution Vulnerability
EVRS 82 Urgent
Rank 465 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 84.6% 99.7th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 82 Urgent
Rank 466 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 84.2% 99.7th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Yealink — Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
EVRS 82 Urgent
Rank 467 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.9% 99.67th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Yealink
- Source
- CISA KEV
D-Link and TRENDnet — D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
EVRS 82 Urgent
Rank 468 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.9% 99.67th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link and TRENDnet
- Source
- CISA KEV
Zyxel — Zyxel Multiple NAS Devices Command Injection Vulnerability
EVRS 82 Urgent
Rank 469 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 82.3% 99.66th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Oracle — Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
EVRS 82 Urgent
Rank 470 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 80.2% 99.62nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Tenda — Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
EVRS 82 Urgent
Rank 471 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 79.8% 99.61st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Tenda
- Source
- CISA KEV
Hewlett Packard (HP) — HP Multiple Products Remote Code Execution Vulnerability
EVRS 82 Urgent
Rank 472 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 79.5% 99.61st percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hewlett Packard (HP)
- Source
- CISA KEV
Cisco — Cisco Identity Services Engine Injection Vulnerability
EVRS 82 Urgent
Rank 473 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 74.5% 99.5th percentile
- In CISA KEV since
- 2025-07-28
- CISA deadline
- 2025-08-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 82 Urgent
Rank 474 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 65.3% 99.26th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Joomla! — Joomla! Improper Access Control Vulnerability
EVRS 81 Urgent
Rank 475 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.3 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Joomla!
- Source
- CISA KEV
