Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 476 | CVE-2020-8243Ivanti — Ivanti Pulse Connect Secure Code Execution VulnerabilityKEV since 2021 · listed over a year | 81 | 7.2 | 90.8% · 99.81st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.908. | |||||||
| 477 | CVE-2021-20123DrayTek — Draytek VigorConnect Path Traversal VulnerabilityKEV since 2024 · listed over a year | 81 | 7.5 | 90.2% · 99.8th | 2024-09-03 | 2024-09-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.902. | |||||||
| 478 | CVE-2024-8190Ivanti — Ivanti Cloud Services Appliance OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 81 | 7.2 | 88.5% · 99.78th | 2024-09-13 | 2024-10-04KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.885. | |||||||
| 479 | CVE-2016-6415Cisco — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 81 | 7.5 | 87.7% · 99.76th | 2023-05-19 | 2023-06-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.877. | |||||||
| 480 | CVE-2007-5659Adobe — Adobe Acrobat and Reader Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 81 | 7.8 | 87.4% · 99.76th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.874. | |||||||
| 481 | CVE-2016-9079Mozilla — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 81 | 7.5 | 87.4% · 99.76th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.874. | |||||||
| 482 | CVE-2018-9276Paessler — Paessler PRTG Network Monitor OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 81 | 7.2 | 87.0% · 99.75th | 2025-02-04 | 2025-02-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.870. | |||||||
| 483 | CVE-2013-0640Adobe — Adobe Reader and Acrobat Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 81 | 7.8 | 86.9% · 99.75th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.869. | |||||||
| 484 | CVE-2018-6961VMware — VMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityKEV since 2022 · listed over a year | 81 | 8.1 | 85.3% · 99.72nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.853. | |||||||
| 485 | CVE-2010-1871Red Hat — Red Hat Linux JBoss Seam 2 Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 81 | 8.8 | 83.4% · 99.68th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.834. | |||||||
| 486 | CVE-2009-3953Adobe — Adobe Acrobat and Reader Universal 3D Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 81 | 8.8 | 83.2% · 99.68th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.832. | |||||||
| 487 | CVE-2013-3346Adobe — Adobe Reader and Acrobat Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 81 | 9.8 | 78.9% · 99.6th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.789. | |||||||
| 488 | CVE-2022-26318WatchGuard — WatchGuard Firebox and XTM Appliances Arbitrary Code ExecutionKEV since 2022 · listed over a year | 81 | 9.8 | 78.2% · 99.58th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.782. | |||||||
| 489 | CVE-2023-34192Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 81 | 9.0 | 77.3% · 99.56th | 2025-02-25 | 2025-03-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.773. | |||||||
| 490 | CVE-2019-7238Sonatype — Sonatype Nexus Repository Manager Incorrect Access Control VulnerabilityKEV since 2021 · listed over a year | 81 | 9.8 | 76.6% · 99.54th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.766. | |||||||
| 491 | CVE-2012-0391Apache — Apache Struts 2 Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 81 | 9.8 | 75.6% · 99.52nd | 2022-01-21 | 2022-07-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.756. | |||||||
| 492 | CVE-2010-0738Red Hat — Red Hat JBoss Authentication Bypass VulnerabilityRansomwareKEV since 2022 · listed over a year | 81 | 5.3 | 74.7% · 99.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 493 | CVE-2025-1316Edimax — Edimax IC-7100 IP Camera OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 81 | 9.3 | 74.5% · 99.5th | 2025-03-19 | 2025-04-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.745. | |||||||
| 494 | CVE-2025-2746Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel VulnerabilityKEV since 2025 · listed over a year | 81 | 9.8 | 74.1% · 99.49th | 2025-10-20 | 2025-11-10KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.741. | |||||||
| 495 | CVE-2025-20333Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 81 | 9.9 | 71.2% · 99.41st | 2025-09-25 | 2025-09-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.712. | |||||||
| 496 | CVE-2022-23134Zabbix — Zabbix Frontend Improper Access Control VulnerabilityKEV since 2022 · listed over a year | 80 | 5.3 | 95.3% · 99.87th | 2022-02-22 | 2022-03-08KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.953. | |||||||
| 497 | CVE-2020-8193Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass VulnerabilityKEV since 2021 · listed over a year | 80 | 6.5 | 88.3% · 99.77th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.883. | |||||||
| 498 | CVE-2021-40655D-Link — D-Link DIR-605 Router Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 80 | 7.5 | 86.7% · 99.74th | 2024-05-16 | 2024-06-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.867. | |||||||
| 499 | CVE-2020-28949PEAR — PEAR Archive_Tar Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 84.6% · 99.7th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.846. | |||||||
| 500 | CVE-2023-28432MinIO — MinIO Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 80 | 7.5 | 84.0% · 99.69th | 2023-04-21 | 2023-05-12KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.840. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsIvanti — Ivanti Pulse Connect Secure Code Execution Vulnerability
EVRS 81 Urgent
Rank 476 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.2 NVD
- EPSS
- 90.8% 99.81st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
DrayTek — Draytek VigorConnect Path Traversal Vulnerability
EVRS 81 Urgent
Rank 477 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.5 NVD
- EPSS
- 90.2% 99.8th percentile
- In CISA KEV since
- 2024-09-03
- CISA deadline
- 2024-09-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Ivanti — Ivanti Cloud Services Appliance OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 478 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.2 NVD
- EPSS
- 88.5% 99.78th percentile
- In CISA KEV since
- 2024-09-13
- CISA deadline
- 2024-10-04 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Cisco — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
EVRS 81 Urgent
Rank 479 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.5 NVD
- EPSS
- 87.7% 99.76th percentile
- In CISA KEV since
- 2023-05-19
- CISA deadline
- 2023-06-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Buffer Overflow Vulnerability
EVRS 81 Urgent
Rank 480 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.8 NVD
- EPSS
- 87.4% 99.76th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
EVRS 81 Urgent
Rank 481 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.5 NVD
- EPSS
- 87.4% 99.76th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Paessler — Paessler PRTG Network Monitor OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 482 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.2 NVD
- EPSS
- 87.0% 99.75th percentile
- In CISA KEV since
- 2025-02-04
- CISA deadline
- 2025-02-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Paessler
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability
EVRS 81 Urgent
Rank 483 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.8 NVD
- EPSS
- 86.9% 99.75th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
VMware — VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
EVRS 81 Urgent
Rank 484 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.1 NVD
- EPSS
- 85.3% 99.72nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Red Hat — Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability
EVRS 81 Urgent
Rank 485 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 83.4% 99.68th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability
EVRS 81 Urgent
Rank 486 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 8.8 NVD
- EPSS
- 83.2% 99.68th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Memory Corruption Vulnerability
EVRS 81 Urgent
Rank 487 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.9% 99.6th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
WatchGuard — WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
EVRS 81 Urgent
Rank 488 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.2% 99.58th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- WatchGuard
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 81 Urgent
Rank 489 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.0 NVD
- EPSS
- 77.3% 99.56th percentile
- In CISA KEV since
- 2025-02-25
- CISA deadline
- 2025-03-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Sonatype — Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
EVRS 81 Urgent
Rank 490 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 76.6% 99.54th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sonatype
- Source
- CISA KEV
Apache — Apache Struts 2 Improper Input Validation Vulnerability
EVRS 81 Urgent
Rank 491 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 75.6% 99.52nd percentile
- In CISA KEV since
- 2022-01-21
- CISA deadline
- 2022-07-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Red Hat — Red Hat JBoss Authentication Bypass Vulnerability
EVRS 81 Urgent
Rank 492 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 5.3 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Edimax — Edimax IC-7100 IP Camera OS Command Injection Vulnerability
EVRS 81 Urgent
Rank 493 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.3 NVD
- EPSS
- 74.5% 99.5th percentile
- In CISA KEV since
- 2025-03-19
- CISA deadline
- 2025-04-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Edimax
- Source
- CISA KEV
Kentico — Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
EVRS 81 Urgent
Rank 494 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.1% 99.49th percentile
- In CISA KEV since
- 2025-10-20
- CISA deadline
- 2025-11-10 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Kentico
- Source
- CISA KEV
Cisco — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
EVRS 81 Urgent
Rank 495 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 9.9 NVD
- EPSS
- 71.2% 99.41st percentile
- In CISA KEV since
- 2025-09-25
- CISA deadline
- 2025-09-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Zabbix — Zabbix Frontend Improper Access Control Vulnerability
EVRS 80 Urgent
Rank 496 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 5.3 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2022-02-22
- CISA deadline
- 2022-03-08 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zabbix
- Source
- CISA KEV
Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
EVRS 80 Urgent
Rank 497 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 6.5 NVD
- EPSS
- 88.3% 99.77th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
D-Link — D-Link DIR-605 Router Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 498 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.5 NVD
- EPSS
- 86.7% 99.74th percentile
- In CISA KEV since
- 2024-05-16
- CISA deadline
- 2024-06-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
PEAR — PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
EVRS 80 Urgent
Rank 499 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.8 NVD
- EPSS
- 84.6% 99.7th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PEAR
- Source
- CISA KEV
MinIO — MinIO Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 500 of 2,962 tracked · as of 23 Oct 05:07 UTC
- CVSS
- 7.5 NVD
- EPSS
- 84.0% 99.69th percentile
- In CISA KEV since
- 2023-04-21
- CISA deadline
- 2023-05-12 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- MinIO
- Source
- CISA KEV
