Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 501 | CVE-2015-3035TP-Link — TP-Link Multiple Archer Devices Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 80 | 7.5 | 83.9% · 99.69th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.839. | |||||||
| 502 | CVE-2010-1297Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 82.5% · 99.67th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.825. | |||||||
| 503 | CVE-2009-4324Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 80 | 7.8 | 81.9% · 99.65th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.819. | |||||||
| 504 | CVE-2019-9621Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2025 · listed over a year | 80 | 7.5 | 81.0% · 99.63rd | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.810. | |||||||
| 505 | CVE-2023-22952SugarCRM — Multiple SugarCRM Products Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 80 | 8.8 | 80.1% · 99.62nd | 2023-02-02 | 2023-02-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.801. | |||||||
| 506 | CVE-2020-6418Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 78.8% · 99.59th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.788. | |||||||
| 507 | CVE-2021-22555Linux — Linux Kernel Heap Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 80 | 7.8 | 78.7% · 99.59th | 2025-10-06 | 2025-10-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.787. | |||||||
| 508 | CVE-2020-10221rConfig — rConfig OS Command Injection VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 77.1% · 99.55th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.771. | |||||||
| 509 | CVE-2019-15949Nagios — Nagios XI Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 80 | 8.8 | 77.0% · 99.55th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.770. | |||||||
| 510 | CVE-2017-9248Progress — Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness VulnerabilityKEV since 2021 · listed over a year | 80 | 9.8 | 75.1% · 99.51st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.751. | |||||||
| 511 | CVE-2014-0780InduSoft — InduSoft Web Studio NTWebServer Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 74.7% · 99.5th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.747. | |||||||
| 512 | CVE-2005-2773Hewlett Packard (HP) — HP OpenView Network Node Manager Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 74.6% · 99.5th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.746. | |||||||
| 513 | CVE-2019-1003029Jenkins — Jenkins Script Security Plugin Sandbox Bypass VulnerabilityKEV since 2022 · listed over a year | 80 | 9.9 | 74.4% · 99.49th | 2022-04-25 | 2022-05-16KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.744. | |||||||
| 514 | CVE-2018-14667Red Hat — Red Hat JBoss RichFaces Framework Expression Language Injection VulnerabilityKEV since 2023 · listed over a year | 80 | 9.8 | 74.2% · 99.49th | 2023-09-28 | 2023-10-19KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.742. | |||||||
| 515 | CVE-2015-3043Adobe — Adobe Flash Player Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 73.9% · 99.48th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.739. | |||||||
| 516 | CVE-2017-6316Citrix — Citrix Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 73.0% · 99.46th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.730. | |||||||
| 517 | CVE-2018-7841Schneider Electric — Schneider Electric U.motion Builder SQL Injection VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 72.7% · 99.45th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.727. | |||||||
| 518 | CVE-2022-20699Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 72.5% · 99.44th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.725. | |||||||
| 519 | CVE-2010-4344Exim — Exim Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 80 | 9.8 | 71.7% · 99.42nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.717. | |||||||
| 520 | CVE-2010-1428Red Hat — Red Hat JBoss Information Disclosure VulnerabilityRansomwareKEV since 2022 · listed over a year | 80 | 7.5 | 61.5% · 99.17th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 521 | CVE-2023-36846Juniper — Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year | 79 | 5.3 | 93.5% · 99.84th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.935. | |||||||
| 522 | CVE-2020-11652SaltStack — SaltStack Salt Path Traversal VulnerabilityKEV since 2021 · listed over a year | 79 | 6.5 | 86.2% · 99.73rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.862. | |||||||
| 523 | CVE-2020-11023JQuery — JQuery Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 79 | 6.1 | 84.9% · 99.71st | 2025-01-23 | 2025-02-13KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.849. | |||||||
| 524 | CVE-2019-0193Apache — Apache Solr DataImportHandler Code Injection VulnerabilityKEV since 2021 · listed over a year | 79 | 7.2 | 83.5% · 99.69th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.835. | |||||||
| 525 | CVE-2016-5195Linux — Linux Kernel Race Condition VulnerabilityKEV since 2022 · listed over a year | 79 | 7.0 | 83.5% · 99.69th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.835. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsTP-Link — TP-Link Multiple Archer Devices Directory Traversal Vulnerability
EVRS 80 Urgent
Rank 501 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.5 NVD
- EPSS
- 83.9% 99.69th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TP-Link
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 80 Urgent
Rank 502 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 82.5% 99.67th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability
EVRS 80 Urgent
Rank 503 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 81.9% 99.65th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
EVRS 80 Urgent
Rank 504 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.5 NVD
- EPSS
- 81.0% 99.63rd percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
SugarCRM — Multiple SugarCRM Products Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 505 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 80.1% 99.62nd percentile
- In CISA KEV since
- 2023-02-02
- CISA deadline
- 2023-02-23 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- SugarCRM
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 80 Urgent
Rank 506 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 78.8% 99.59th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Linux — Linux Kernel Heap Out-of-Bounds Write Vulnerability
EVRS 80 Urgent
Rank 507 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 78.7% 99.59th percentile
- In CISA KEV since
- 2025-10-06
- CISA deadline
- 2025-10-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
rConfig — rConfig OS Command Injection Vulnerability
EVRS 80 Urgent
Rank 508 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 77.1% 99.55th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- rConfig
- Source
- CISA KEV
Nagios — Nagios XI Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 509 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 77.0% 99.55th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
Progress — Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
EVRS 80 Urgent
Rank 510 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 75.1% 99.51st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Progress
- Source
- CISA KEV
InduSoft — InduSoft Web Studio NTWebServer Directory Traversal Vulnerability
EVRS 80 Urgent
Rank 511 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- InduSoft
- Source
- CISA KEV
Hewlett Packard (HP) — HP OpenView Network Node Manager Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 512 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.6% 99.5th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hewlett Packard (HP)
- Source
- CISA KEV
Jenkins — Jenkins Script Security Plugin Sandbox Bypass Vulnerability
EVRS 80 Urgent
Rank 513 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.9 NVD
- EPSS
- 74.4% 99.49th percentile
- In CISA KEV since
- 2022-04-25
- CISA deadline
- 2022-05-16 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Jenkins
- Source
- CISA KEV
Red Hat — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
EVRS 80 Urgent
Rank 514 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 74.2% 99.49th percentile
- In CISA KEV since
- 2023-09-28
- CISA deadline
- 2023-10-19 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Red Hat
- Source
- CISA KEV
Adobe — Adobe Flash Player Memory Corruption Vulnerability
EVRS 80 Urgent
Rank 515 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.9% 99.48th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Citrix — Citrix Multiple Products Remote Code Execution Vulnerability
EVRS 80 Urgent
Rank 516 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 73.0% 99.46th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Schneider Electric — Schneider Electric U.motion Builder SQL Injection Vulnerability
EVRS 80 Urgent
Rank 517 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 72.7% 99.45th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Schneider Electric
- Source
- CISA KEV
Cisco — Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
EVRS 80 Urgent
Rank 518 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 72.5% 99.44th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Exim — Exim Heap-Based Buffer Overflow Vulnerability
EVRS 80 Urgent
Rank 519 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 71.7% 99.42nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Exim
- Source
- CISA KEV
Red Hat — Red Hat JBoss Information Disclosure Vulnerability
EVRS 80 Urgent
Rank 520 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.5 NVD
- EPSS
- 61.5% 99.17th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Juniper — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
EVRS 79 Urgent
Rank 521 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.3 NVD
- EPSS
- 93.5% 99.84th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
SaltStack — SaltStack Salt Path Traversal Vulnerability
EVRS 79 Urgent
Rank 522 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.5 NVD
- EPSS
- 86.2% 99.73rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SaltStack
- Source
- CISA KEV
JQuery — JQuery Cross-Site Scripting (XSS) Vulnerability
EVRS 79 Urgent
Rank 523 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.1 NVD
- EPSS
- 84.9% 99.71st percentile
- In CISA KEV since
- 2025-01-23
- CISA deadline
- 2025-02-13 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- JQuery
- Source
- CISA KEV
Apache — Apache Solr DataImportHandler Code Injection Vulnerability
EVRS 79 Urgent
Rank 524 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.2 NVD
- EPSS
- 83.5% 99.69th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Linux — Linux Kernel Race Condition Vulnerability
EVRS 79 Urgent
Rank 525 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.0 NVD
- EPSS
- 83.5% 99.69th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
