Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,954| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 576 | CVE-2020-36193PEAR — PEAR Archive_Tar Improper Link Resolution VulnerabilityKEV since 2022 · listed over a year | 76 | 7.5 | 70.6% · 99.39th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.706. | |||||||
| 577 | CVE-2019-18426Meta Platforms — WhatsApp Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 76 | 8.2 | 67.9% · 99.32nd | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.679. | |||||||
| 578 | CVE-2025-04117-Zip — 7-Zip Mark of the Web Bypass VulnerabilityKEV since 2025 · listed over a year | 76 | 7.0 | 67.1% · 99.3rd | 2025-02-06 | 2025-02-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.671. | |||||||
| 579 | CVE-2021-30551Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 76 | 8.8 | 64.7% · 99.24th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.647. | |||||||
| 580 | CVE-2015-4068Arcserve — Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 76 | 9.1 | 63.6% · 99.22nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.636. | |||||||
| 581 | CVE-2021-30632Google — Google Chromium V8 Out-of-Bounds Write VulnerabilityKEV since 2021 · listed over a year | 76 | 8.8 | 63.2% · 99.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.632. | |||||||
| 582 | CVE-2020-4428IBM — IBM Data Risk Manager Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 76 | 9.1 | 61.7% · 99.17th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.617. | |||||||
| 583 | CVE-2025-53690Sitecore — Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityKEV since 2025 · listed over a year | 76 | 9.0 | 60.6% · 99.15th | 2025-09-04 | 2025-09-25KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.606. | |||||||
| 584 | CVE-2024-8956PTZOptics — PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 76 | 9.1 | 58.8% · 99.11st | 2024-11-04 | 2024-11-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.588. | |||||||
| 585 | CVE-2020-26919NETGEAR — Netgear JGS516PE Devices Missing Function Level Access Control VulnerabilityKEV since 2021 · listed over a year | 76 | 9.8 | 57.5% · 99.08th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.575. | |||||||
| 586 | CVE-2019-11708Mozilla — Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityKEV since 2022 · listed over a year | 76 | 10.0 | 55.9% · 99.05th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.559. | |||||||
| 587 | CVE-2024-38812VMware — VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityKEV since 2024 · listed over a year | 76 | 9.8 | 54.6% · 99.02nd | 2024-11-20 | 2024-12-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.546. | |||||||
| 588 | CVE-2013-2423Oracle — Oracle JRE Unspecified VulnerabilityKEV since 2022 · listed over a year | 75 | 3.7 | 85.2% · 99.72nd | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.852. | |||||||
| 589 | CVE-2023-5631Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 5.4 | 76.9% · 99.55th | 2023-10-26 | 2023-11-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.769. | |||||||
| 590 | CVE-2016-3718ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 75.6% · 99.52nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.756. | |||||||
| 591 | CVE-2016-3715ImageMagick — ImageMagick Arbitrary File Deletion VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 75.3% · 99.51st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.753. | |||||||
| 592 | CVE-2019-9978WordPress — WordPress Social Warfare Plugin Cross-Site Scripting (XSS) VulnerabilityKEV since 2021 · listed over a year | 75 | 6.1 | 72.9% · 99.45th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.729. | |||||||
| 593 | CVE-2022-28810Zoho — Zoho ManageEngine ADSelfService Plus Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 75 | 6.8 | 71.0% · 99.4th | 2023-03-07 | 2023-03-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.710. | |||||||
| 594 | CVE-2016-11021D-Link — D-Link DCS-930L Devices OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 68.9% · 99.35th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.689. | |||||||
| 595 | CVE-2020-4430IBM — IBM Data Risk Manager Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 4.3 | 68.5% · 99.34th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.685. | |||||||
| 596 | CVE-2021-30657Apple — Apple macOS Unspecified VulnerabilityKEV since 2021 · listed over a year | 75 | 5.5 | 68.5% · 99.34th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.685. | |||||||
| 597 | CVE-2013-0631Adobe — Adobe ColdFusion Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 66.4% · 99.28th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.664. | |||||||
| 598 | CVE-2013-0629Adobe — Adobe ColdFusion Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 65.8% · 99.27th | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.658. | |||||||
| 599 | CVE-2019-0211Apache — Apache HTTP Server Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 65.0% · 99.25th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.650. | |||||||
| 600 | CVE-2023-29552IETF — Service Location Protocol (SLP) Denial-of-Service VulnerabilityKEV since 2023 · listed over a year | 75 | 7.5 | 64.0% · 99.22nd | 2023-11-08 | 2023-11-29KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.640. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsPEAR — PEAR Archive_Tar Improper Link Resolution Vulnerability
EVRS 76 Urgent
Rank 576 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 70.6% 99.39th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PEAR
- Source
- CISA KEV
Meta Platforms — WhatsApp Cross-Site Scripting Vulnerability
EVRS 76 Urgent
Rank 577 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.2 NVD
- EPSS
- 67.9% 99.32nd percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Meta Platforms
- Source
- CISA KEV
7-Zip — 7-Zip Mark of the Web Bypass Vulnerability
EVRS 76 Urgent
Rank 578 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.0 NVD
- EPSS
- 67.1% 99.3rd percentile
- In CISA KEV since
- 2025-02-06
- CISA deadline
- 2025-02-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- 7-Zip
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 76 Urgent
Rank 579 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 64.7% 99.24th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Arcserve — Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
EVRS 76 Urgent
Rank 580 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.1 NVD
- EPSS
- 63.6% 99.22nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arcserve
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Write Vulnerability
EVRS 76 Urgent
Rank 581 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 8.8 NVD
- EPSS
- 63.2% 99.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
IBM — IBM Data Risk Manager Remote Code Execution Vulnerability
EVRS 76 Urgent
Rank 582 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.1 NVD
- EPSS
- 61.7% 99.17th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Sitecore — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability
EVRS 76 Urgent
Rank 583 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.0 NVD
- EPSS
- 60.6% 99.15th percentile
- In CISA KEV since
- 2025-09-04
- CISA deadline
- 2025-09-25 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sitecore
- Source
- CISA KEV
PTZOptics — PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability
EVRS 76 Urgent
Rank 584 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.1 NVD
- EPSS
- 58.8% 99.11st percentile
- In CISA KEV since
- 2024-11-04
- CISA deadline
- 2024-11-25 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- PTZOptics
- Source
- CISA KEV
NETGEAR — Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
EVRS 76 Urgent
Rank 585 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 57.5% 99.08th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Mozilla — Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
EVRS 76 Urgent
Rank 586 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 10.0 NVD
- EPSS
- 55.9% 99.05th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
VMware — VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
EVRS 76 Urgent
Rank 587 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 9.8 NVD
- EPSS
- 54.6% 99.02nd percentile
- In CISA KEV since
- 2024-11-20
- CISA deadline
- 2024-12-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Oracle — Oracle JRE Unspecified Vulnerability
EVRS 75 Urgent
Rank 588 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 3.7 NVD
- EPSS
- 85.2% 99.72nd percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Roundcube — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 589 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 5.4 NVD
- EPSS
- 76.9% 99.55th percentile
- In CISA KEV since
- 2023-10-26
- CISA deadline
- 2023-11-16 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
ImageMagick — ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
EVRS 75 Urgent
Rank 590 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 5.5 NVD
- EPSS
- 75.6% 99.52nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ImageMagick
- Source
- CISA KEV
ImageMagick — ImageMagick Arbitrary File Deletion Vulnerability
EVRS 75 Urgent
Rank 591 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 5.5 NVD
- EPSS
- 75.3% 99.51st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ImageMagick
- Source
- CISA KEV
WordPress — WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 592 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 6.1 NVD
- EPSS
- 72.9% 99.45th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- WordPress
- Source
- CISA KEV
Zoho — Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 593 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 6.8 NVD
- EPSS
- 71.0% 99.4th percentile
- In CISA KEV since
- 2023-03-07
- CISA deadline
- 2023-03-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
D-Link — D-Link DCS-930L Devices OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 594 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.2 NVD
- EPSS
- 68.9% 99.35th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
IBM — IBM Data Risk Manager Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 595 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 4.3 NVD
- EPSS
- 68.5% 99.34th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- IBM
- Source
- CISA KEV
Apple — Apple macOS Unspecified Vulnerability
EVRS 75 Urgent
Rank 596 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 5.5 NVD
- EPSS
- 68.5% 99.34th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Adobe — Adobe ColdFusion Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 597 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 66.4% 99.28th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Adobe — Adobe ColdFusion Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 598 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 65.8% 99.27th percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Apache — Apache HTTP Server Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 599 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.8 NVD
- EPSS
- 65.0% 99.25th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
IETF — Service Location Protocol (SLP) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 600 of 2,954 tracked · as of 23 Oct 08:13 UTC
- CVSS
- 7.5 NVD
- EPSS
- 64.0% 99.22nd percentile
- In CISA KEV since
- 2023-11-08
- CISA deadline
- 2023-11-29 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- IETF
- Source
- CISA KEV
