Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 1 filter on

Ranked by EVRS

1,099 match · filtered from 2,960 Sort

All 25 rows on this page are CISA KEV Ransomware Exigent. Rows show only what differs.

Priority Feed, rows 26 to 50
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
26	CVE-2021-41773Apache — Apache HTTP Server Path Traversal VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
27	CVE-2018-7600Drupal — Drupal Core Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.99th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
28	CVE-2023-29300Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year	94	9.8	100.0% · 99.99th	2024-01-08	2024-01-29KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
29	CVE-2023-42793JetBrains — JetBrains TeamCity Authentication Bypass VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.98th	2023-10-04	2023-10-25KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
30	CVE-2024-4577PHP Group — PHP-CGI OS Command Injection VulnerabilityKEV since 2024 · listed over a year	94	9.8	100.0% · 99.98th	2024-06-12	2024-07-03KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
31	CVE-2022-40684Fortinet — Fortinet Multiple Products Authentication Bypass VulnerabilityKEV since 2022 · listed over a year	94	9.8	100.0% · 99.98th	2022-10-11	2022-11-01KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
32	CVE-2023-22527Atlassian — Atlassian Confluence Data Center and Server Template Injection VulnerabilityKEV since 2024 · listed over a year	94	9.8	100.0% · 99.98th	2024-01-24	2024-02-14KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
33	CVE-2025-0282Ivanti — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year	94	9.0	100.0% · 99.98th	2025-01-08	2025-01-15KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
34	CVE-2024-1709ConnectWise — ConnectWise ScreenConnect Authentication Bypass VulnerabilityKEV since 2024 · listed over a year	94	10.0	100.0% · 99.98th	2024-02-22	2024-02-29KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
35	CVE-2019-2725Oracle — Oracle WebLogic Server, InjectionKEV since 2022 · listed over a year	94	9.8	100.0% · 99.98th	2022-01-10	2022-07-10KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
36	CVE-2025-5777Citrix — Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityKEV since 2025 · listed over a year	94	9.3	100.0% · 99.98th	2025-07-10	2025-07-11KEV since 2025 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
37	CVE-2022-47986IBM — IBM Aspera Faspex Code Execution VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.98th	2023-02-21	2023-03-14KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
38	CVE-2021-42013Apache — Apache HTTP Server Path Traversal VulnerabilityKEV since 2021 · listed over a year	94	9.8	100.0% · 99.98th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
39	CVE-2022-1388F5 — F5 BIG-IP Missing Authentication VulnerabilityKEV since 2022 · listed over a year	94	9.8	100.0% · 99.98th	2022-05-10	2022-05-31KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
40	CVE-2023-38035Ivanti — Ivanti Sentry Authentication Bypass VulnerabilityKEV since 2023 · listed over a year	94	9.8	100.0% · 99.98th	2023-08-22	2023-09-12KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
41	CVE-2018-10562Dasan — Dasan GPON Routers Command Injection VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.9% · 99.97th	2022-03-31	2022-04-21KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
42	CVE-2021-3129Laravel — Laravel Ignition File Upload VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.9% · 99.97th	2023-09-18	2023-10-09KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
43	CVE-2024-27198JetBrains — JetBrains TeamCity Authentication Bypass VulnerabilityKEV since 2024 · listed over a year	94	9.8	99.9% · 99.97th	2024-03-07	2024-03-28KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
44	CVE-2023-34362Progress — Progress MOVEit Transfer SQL Injection VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.9% · 99.97th	2023-06-02	2023-06-23KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
45	CVE-2019-3396Atlassian — Atlassian Confluence Server and Data Center Server-Side Template Injection VulnerabilityKEV since 2021 · listed over a year	94	9.8	99.9% · 99.97th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
46	CVE-2021-20038SonicWall — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.9% · 99.97th	2022-01-28	2022-02-11KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
47	CVE-2021-22986F5 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	99.9% · 99.97th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
48	CVE-2023-46604Apache — Apache ActiveMQ Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.9% · 99.97th	2023-11-02	2023-11-23KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
49	CVE-2021-21972VMware — VMware vCenter Server Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	9.8	99.9% · 99.96th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
50	CVE-2024-0012Palo Alto Networks — Palo Alto Networks PAN-OS Management Interface Authentication Bypass VulnerabilityKEV since 2024 · listed over a year	94	9.3	99.9% · 99.96th	2024-11-18	2024-12-09KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics