Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,954| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 551 | CVE-2017-6736Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 78 | 8.8 | 70.4% · 99.39th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
| 552 | CVE-2016-20017D-Link — D-Link DSL-2750B Devices Command Injection VulnerabilityKEV since 2024 · listed over a year | 78 | 9.8 | 66.6% · 99.29th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.666. | |||||||
| 553 | CVE-2013-2729Adobe — Adobe Reader and Acrobat Arbitrary Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 78 | 9.8 | 66.6% · 99.29th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.666. | |||||||
| 554 | CVE-2015-7755Juniper — Juniper ScreenOS Improper Authentication VulnerabilityKEV since 2025 · listed over a year | 78 | 9.8 | 61.1% · 99.16th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.611. | |||||||
| 555 | CVE-2024-54085AMI — AMI MegaRAC SPx Authentication Bypass by Spoofing VulnerabilityKEV since 2025 · listed over a year | 78 | 10.0 | 60.7% · 99.15th | 2025-06-25 | 2025-07-16KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.607. | |||||||
| 556 | CVE-2023-36847Juniper — Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityKEV since 2023 · listed over a year | 77 | 5.3 | 83.5% · 99.69th | 2023-11-13 | 2023-11-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.835. | |||||||
| 557 | CVE-2018-18809TIBCO — TIBCO JasperReports Library Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 77 | 6.5 | 79.1% · 99.6th | 2022-12-29 | 2023-01-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.791. | |||||||
| 558 | CVE-2018-8298ChakraCore — ChakraCore Scripting Engine Type Confusion VulnerabilityKEV since 2022 · listed over a year | 77 | 7.5 | 74.7% · 99.5th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.747. | |||||||
| 559 | CVE-2018-18325DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityKEV since 2021 · listed over a year | 77 | 7.5 | 74.0% · 99.48th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.740. | |||||||
| 560 | CVE-2019-2215Android — Android Kernel Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 77 | 7.8 | 72.1% · 99.43rd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.721. | |||||||
| 561 | CVE-2012-1535Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 77 | 7.8 | 70.4% · 99.39th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.704. | |||||||
| 562 | CVE-2013-1690Mozilla — Mozilla Firefox and Thunderbird Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 69.0% · 99.35th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.690. | |||||||
| 563 | CVE-2015-4495Mozilla — Mozilla Firefox Security Feature Bypass VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 68.6% · 99.34th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.686. | |||||||
| 564 | CVE-2015-8651Adobe — Adobe Flash Player Integer Overflow VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 67.7% · 99.32nd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.677. | |||||||
| 565 | CVE-2016-4657Apple — Apple iOS Webkit Memory Corruption VulnerabilityKEV since 2022 · listed over a year | 77 | 8.8 | 66.8% · 99.29th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.668. | |||||||
| 566 | CVE-2020-15999Google — Google Chrome FreeType Heap Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 77 | 9.6 | 63.9% · 99.22nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.639. | |||||||
| 567 | CVE-2022-21445Oracle — Oracle ADF Faces Deserialization of Untrusted Data VulnerabilityKEV since 2024 · listed over a year | 77 | 9.8 | 62.5% · 99.19th | 2024-09-18 | 2024-10-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.625. | |||||||
| 568 | CVE-2018-4939Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year | 77 | 9.8 | 62.0% · 99.18th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.620. | |||||||
| 569 | CVE-2024-23113Fortinet — Fortinet Multiple Products Format String VulnerabilityKEV since 2024 · listed over a year | 77 | 9.8 | 61.7% · 99.17th | 2024-10-09 | 2024-10-30KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.617. | |||||||
| 570 | CVE-2021-22991F5 — F5 BIG-IP Traffic Management Microkernel Buffer OverflowKEV since 2022 · listed over a year | 77 | 9.8 | 61.1% · 99.16th | 2022-01-18 | 2022-02-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.611. | |||||||
| 571 | CVE-2018-7445MikroTik — MikroTik RouterOS Stack-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 77 | 9.8 | 60.8% · 99.15th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.608. | |||||||
| 572 | CVE-2019-1579Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 77 | 8.1 | 46.2% · 98.8th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 573 | CVE-2020-13965Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 76 | 6.1 | 76.6% · 99.54th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.766. | |||||||
| 574 | CVE-2024-37383Roundcube — RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2024 · listed over a year | 76 | 6.1 | 73.3% · 99.46th | 2024-10-24 | 2024-11-14KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.733. | |||||||
| 575 | CVE-2020-5741Plex — Plex Media Server Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 76 | 7.2 | 72.8% · 99.45th | 2023-03-10 | 2023-03-31KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.728. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsCisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 78 Urgent
Rank 551 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
D-Link — D-Link DSL-2750B Devices Command Injection Vulnerability
EVRS 78 Urgent
Rank 552 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 66.6% 99.29th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
EVRS 78 Urgent
Rank 553 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 66.6% 99.29th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Juniper — Juniper ScreenOS Improper Authentication Vulnerability
EVRS 78 Urgent
Rank 554 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.1% 99.16th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
AMI — AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability
EVRS 78 Urgent
Rank 555 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 10.0 NVD
- EPSS
- 60.7% 99.15th percentile
- In CISA KEV since
- 2025-06-25
- CISA deadline
- 2025-07-16 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- AMI
- Source
- CISA KEV
Juniper — Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
EVRS 77 Urgent
Rank 556 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 5.3 NVD
- EPSS
- 83.5% 99.69th percentile
- In CISA KEV since
- 2023-11-13
- CISA deadline
- 2023-11-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Juniper
- Source
- CISA KEV
TIBCO — TIBCO JasperReports Library Directory Traversal Vulnerability
EVRS 77 Urgent
Rank 557 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 6.5 NVD
- EPSS
- 79.1% 99.6th percentile
- In CISA KEV since
- 2022-12-29
- CISA deadline
- 2023-01-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TIBCO
- Source
- CISA KEV
ChakraCore — ChakraCore Scripting Engine Type Confusion Vulnerability
EVRS 77 Urgent
Rank 558 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.7% 99.5th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- ChakraCore
- Source
- CISA KEV
DotNetNuke (DNN) — DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
EVRS 77 Urgent
Rank 559 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 74.0% 99.48th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DotNetNuke (DNN)
- Source
- CISA KEV
Android — Android Kernel Use-After-Free Vulnerability
EVRS 77 Urgent
Rank 560 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.8 NVD
- EPSS
- 72.1% 99.43rd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Android
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 77 Urgent
Rank 561 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.8 NVD
- EPSS
- 70.4% 99.39th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Mozilla — Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
EVRS 77 Urgent
Rank 562 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 69.0% 99.35th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Mozilla — Mozilla Firefox Security Feature Bypass Vulnerability
EVRS 77 Urgent
Rank 563 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 68.6% 99.34th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
Adobe — Adobe Flash Player Integer Overflow Vulnerability
EVRS 77 Urgent
Rank 564 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 67.7% 99.32nd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apple — Apple iOS Webkit Memory Corruption Vulnerability
EVRS 77 Urgent
Rank 565 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 66.8% 99.29th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chrome FreeType Heap Buffer Overflow Vulnerability
EVRS 77 Urgent
Rank 566 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.6 NVD
- EPSS
- 63.9% 99.22nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Oracle — Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
EVRS 77 Urgent
Rank 567 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 62.5% 99.19th percentile
- In CISA KEV since
- 2024-09-18
- CISA deadline
- 2024-10-09 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 77 Urgent
Rank 568 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 62.0% 99.18th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Format String Vulnerability
EVRS 77 Urgent
Rank 569 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.7% 99.17th percentile
- In CISA KEV since
- 2024-10-09
- CISA deadline
- 2024-10-30 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
F5 — F5 BIG-IP Traffic Management Microkernel Buffer Overflow
EVRS 77 Urgent
Rank 570 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 61.1% 99.16th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-02-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- F5
- Source
- CISA KEV
MikroTik — MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
EVRS 77 Urgent
Rank 571 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 60.8% 99.15th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- MikroTik
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
EVRS 77 Urgent
Rank 572 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.1 NVD
- EPSS
- 46.2% 98.8th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 76 Urgent
Rank 573 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 6.1 NVD
- EPSS
- 76.6% 99.54th percentile
- In CISA KEV since
- 2024-06-26
- CISA deadline
- 2024-07-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Roundcube — RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 76 Urgent
Rank 574 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 6.1 NVD
- EPSS
- 73.3% 99.46th percentile
- In CISA KEV since
- 2024-10-24
- CISA deadline
- 2024-11-14 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Plex — Plex Media Server Remote Code Execution Vulnerability
EVRS 76 Urgent
Rank 575 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.2 NVD
- EPSS
- 72.8% 99.45th percentile
- In CISA KEV since
- 2023-03-10
- CISA deadline
- 2023-03-31 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Plex
- Source
- CISA KEV
