Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,954| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 526 | CVE-2010-2883Adobe — Adobe Acrobat and Reader Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 79 | 7.3 | 81.4% · 99.64th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.814. | |||||||
| 527 | CVE-2021-21551Dell — Dell dbutil Driver Insufficient Access Control VulnerabilityKEV since 2022 · listed over a year | 79 | 7.8 | 80.1% · 99.62nd | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.801. | |||||||
| 528 | CVE-2024-8957PTZOptics — PTZOptics PT30X-SDI/NDI Cameras OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 79 | 7.2 | 79.8% · 99.61st | 2024-11-04 | 2024-11-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.798. | |||||||
| 529 | CVE-2018-15133Laravel — Laravel Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 79 | 8.1 | 76.6% · 99.54th | 2024-01-16 | 2024-02-06KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.766. | |||||||
| 530 | CVE-2019-12991Citrix — Citrix SD-WAN and NetScaler Command Injection VulnerabilityKEV since 2022 · listed over a year | 79 | 8.8 | 74.5% · 99.5th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.745. | |||||||
| 531 | CVE-2021-25298Nagios — Nagios XI OS Command InjectionKEV since 2022 · listed over a year | 79 | 8.8 | 73.6% · 99.47th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.736. | |||||||
| 532 | CVE-2023-47565QNAP — QNAP VioStor NVR OS Command Injection VulnerabilityKEV since 2023 · listed over a year | 79 | 8.8 | 73.3% · 99.46th | 2023-12-21 | 2024-01-11KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.733. | |||||||
| 533 | CVE-2025-30066tj-actions — tj-actions/changed-files GitHub Action Embedded Malicious Code VulnerabilityKEV since 2025 · listed over a year | 79 | 8.6 | 72.1% · 99.43rd | 2025-03-18 | 2025-04-08KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.721. | |||||||
| 534 | CVE-2016-2386SAP — SAP NetWeaver SQL Injection VulnerabilityKEV since 2022 · listed over a year | 79 | 9.8 | 71.5% · 99.42nd | 2022-06-09 | 2022-06-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.715. | |||||||
| 535 | CVE-2020-4427IBM — IBM Data Risk Manager Security Bypass VulnerabilityKEV since 2021 · listed over a year | 79 | 9.8 | 70.0% · 99.38th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.700. | |||||||
| 536 | CVE-2021-44026Roundcube — Roundcube Webmail SQL Injection VulnerabilityKEV since 2023 · listed over a year | 79 | 9.8 | 69.9% · 99.37th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.699. | |||||||
| 537 | CVE-2017-6077NETGEAR — NETGEAR DGN2200 Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 79 | 9.8 | 68.7% · 99.34th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.687. | |||||||
| 538 | CVE-2025-2776SysAid — SysAid On-Prem Improper Restriction of XML External Entity Reference VulnerabilityKEV since 2025 · listed over a year | 79 | 9.8 | 64.7% · 99.24th | 2025-07-22 | 2025-08-12KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.647. | |||||||
| 539 | CVE-2023-36844Juniper — Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityKEV since 2023 · listed over a year | 78 | 5.3 | 90.0% · 99.8th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.900. | |||||||
| 540 | CVE-2021-21973VMware — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) VulnerabilityKEV since 2022 · listed over a year | 78 | 5.3 | 88.0% · 99.77th | 2022-03-07 | 2022-03-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.880. | |||||||
| 541 | CVE-2023-49103ownCloud — ownCloud graphapi Information Disclosure VulnerabilityKEV since 2023 · listed over a year | 78 | 7.5 | 78.4% · 99.58th | 2023-11-30 | 2023-12-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.784. | |||||||
| 542 | CVE-2020-8816Pi-hole — Pi-Hole AdminLTE Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 78 | 7.2 | 78.3% · 99.58th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.783. | |||||||
| 543 | CVE-2021-38406Delta Electronics — Delta Electronics DOPSoft 2 Improper Input Validation VulnerabilityKEV since 2022 · listed over a year | 78 | 7.8 | 76.4% · 99.54th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.764. | |||||||
| 544 | CVE-2018-15811DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityKEV since 2021 · listed over a year | 78 | 7.5 | 76.3% · 99.54th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.763. | |||||||
| 545 | CVE-2023-44221SonicWall — SonicWall SMA100 Appliances OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 78 | 7.2 | 76.2% · 99.54th | 2025-05-01 | 2025-05-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.762. | |||||||
| 546 | CVE-2021-30860Apple — Apple Multiple Products Integer Overflow VulnerabilityKEV since 2021 · listed over a year | 78 | 7.8 | 76.0% · 99.53rd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.760. | |||||||
| 547 | CVE-2017-6334NETGEAR — NETGEAR DGN2200 Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 78 | 8.8 | 72.6% · 99.44th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.726. | |||||||
| 548 | CVE-2021-25296Nagios — Nagios XI OS Command InjectionKEV since 2022 · listed over a year | 78 | 8.8 | 71.9% · 99.43rd | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.719. | |||||||
| 549 | CVE-2024-20353Cisco — Cisco ASA and FTD Denial of Service VulnerabilityKEV since 2024 · listed over a year | 78 | 8.6 | 70.7% · 99.4th | 2024-04-24 | 2024-05-01KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.707. | |||||||
| 550 | CVE-2021-21220Google — Google Chromium V8 Improper Input Validation VulnerabilityKEV since 2021 · listed over a year | 78 | 8.8 | 70.4% · 99.39th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability
EVRS 79 Urgent
Rank 526 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.3 NVD
- EPSS
- 81.4% 99.64th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Dell — Dell dbutil Driver Insufficient Access Control Vulnerability
EVRS 79 Urgent
Rank 527 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 80.1% 99.62nd percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dell
- Source
- CISA KEV
PTZOptics — PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability
EVRS 79 Urgent
Rank 528 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.2 NVD
- EPSS
- 79.8% 99.61st percentile
- In CISA KEV since
- 2024-11-04
- CISA deadline
- 2024-11-25 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- PTZOptics
- Source
- CISA KEV
Laravel — Laravel Deserialization of Untrusted Data Vulnerability
EVRS 79 Urgent
Rank 529 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.1 NVD
- EPSS
- 76.6% 99.54th percentile
- In CISA KEV since
- 2024-01-16
- CISA deadline
- 2024-02-06 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Laravel
- Source
- CISA KEV
Citrix — Citrix SD-WAN and NetScaler Command Injection Vulnerability
EVRS 79 Urgent
Rank 530 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 74.5% 99.5th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Nagios — Nagios XI OS Command Injection
EVRS 79 Urgent
Rank 531 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 73.6% 99.47th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
QNAP — QNAP VioStor NVR OS Command Injection Vulnerability
EVRS 79 Urgent
Rank 532 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 73.3% 99.46th percentile
- In CISA KEV since
- 2023-12-21
- CISA deadline
- 2024-01-11 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- QNAP
- Source
- CISA KEV
tj-actions — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
EVRS 79 Urgent
Rank 533 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.6 NVD
- EPSS
- 72.1% 99.43rd percentile
- In CISA KEV since
- 2025-03-18
- CISA deadline
- 2025-04-08 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- tj-actions
- Source
- CISA KEV
SAP — SAP NetWeaver SQL Injection Vulnerability
EVRS 79 Urgent
Rank 534 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 71.5% 99.42nd percentile
- In CISA KEV since
- 2022-06-09
- CISA deadline
- 2022-06-30 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
IBM — IBM Data Risk Manager Security Bypass Vulnerability
EVRS 79 Urgent
Rank 535 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 70.0% 99.38th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Roundcube — Roundcube Webmail SQL Injection Vulnerability
EVRS 79 Urgent
Rank 536 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 69.9% 99.37th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
NETGEAR — NETGEAR DGN2200 Remote Code Execution Vulnerability
EVRS 79 Urgent
Rank 537 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 68.7% 99.34th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
SysAid — SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability
EVRS 79 Urgent
Rank 538 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 9.8 NVD
- EPSS
- 64.7% 99.24th percentile
- In CISA KEV since
- 2025-07-22
- CISA deadline
- 2025-08-12 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SysAid
- Source
- CISA KEV
Juniper — Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
EVRS 78 Urgent
Rank 539 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 5.3 NVD
- EPSS
- 90.0% 99.8th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
VMware — VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability
EVRS 78 Urgent
Rank 540 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 5.3 NVD
- EPSS
- 88.0% 99.77th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-03-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
ownCloud — ownCloud graphapi Information Disclosure Vulnerability
EVRS 78 Urgent
Rank 541 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.5 NVD
- EPSS
- 78.4% 99.58th percentile
- In CISA KEV since
- 2023-11-30
- CISA deadline
- 2023-12-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- ownCloud
- Source
- CISA KEV
Pi-hole — Pi-Hole AdminLTE Remote Code Execution Vulnerability
EVRS 78 Urgent
Rank 542 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.2 NVD
- EPSS
- 78.3% 99.58th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Pi-hole
- Source
- CISA KEV
Delta Electronics — Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability
EVRS 78 Urgent
Rank 543 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 76.4% 99.54th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Delta Electronics
- Source
- CISA KEV
DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
EVRS 78 Urgent
Rank 544 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.5 NVD
- EPSS
- 76.3% 99.54th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DotNetNuke (DNN)
- Source
- CISA KEV
SonicWall — SonicWall SMA100 Appliances OS Command Injection Vulnerability
EVRS 78 Urgent
Rank 545 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.2 NVD
- EPSS
- 76.2% 99.54th percentile
- In CISA KEV since
- 2025-05-01
- CISA deadline
- 2025-05-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple Multiple Products Integer Overflow Vulnerability
EVRS 78 Urgent
Rank 546 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 7.8 NVD
- EPSS
- 76.0% 99.53rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
NETGEAR — NETGEAR DGN2200 Devices OS Command Injection Vulnerability
EVRS 78 Urgent
Rank 547 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 72.6% 99.44th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Nagios — Nagios XI OS Command Injection
EVRS 78 Urgent
Rank 548 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 71.9% 99.43rd percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Nagios
- Source
- CISA KEV
Cisco — Cisco ASA and FTD Denial of Service Vulnerability
EVRS 78 Urgent
Rank 549 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.6 NVD
- EPSS
- 70.7% 99.4th percentile
- In CISA KEV since
- 2024-04-24
- CISA deadline
- 2024-05-01 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Google — Google Chromium V8 Improper Input Validation Vulnerability
EVRS 78 Urgent
Rank 550 of 2,954 tracked · as of 23 Oct 07:03 UTC
- CVSS
- 8.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
