Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 626 | CVE-2019-13272Linux — Linux Kernel Improper Privilege Management VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 52.2% · 99th | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.522. | |||||||
| 627 | CVE-2021-28550Adobe — Adobe Acrobat and Reader Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 51.9% · 99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.519. | |||||||
| 628 | CVE-2021-20023SonicWall — SonicWall Email Security Path Traversal VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 4.9 | 51.7% · 98.9th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 629 | CVE-2023-32434Apple — Apple Multiple Products Integer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 7.8 | 51.5% · 98.9th | 2023-06-23 | 2023-07-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.515. | |||||||
| 630 | CVE-2013-5223D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityKEV since 2022 · listed over a year | 75 | 5.4 | 50.8% · 98.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.508. | |||||||
| 631 | CVE-2023-49897FXC — FXC AE1021, AE1021PE OS Command Injection VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 50.4% · 98.9th | 2023-12-21 | 2024-01-11KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.504. | |||||||
| 632 | CVE-2019-13720Google — Google Chrome WebAudio Use-After-Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 49.4% · 98.9th | 2022-05-23 | 2022-06-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.494. | |||||||
| 633 | CVE-2021-22017VMware — VMware vCenter Server Improper Access ControlKEV since 2022 · listed over a year | 75 | 5.3 | 49.2% · 98.9th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.492. | |||||||
| 634 | CVE-2021-3493Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 49.2% · 98.9th | 2022-10-20 | 2022-11-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.492. | |||||||
| 635 | CVE-2023-37580Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 49.1% · 98.9th | 2023-07-27 | 2023-08-17KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.491. | |||||||
| 636 | CVE-2023-5217Google — Google Chromium libvpx Heap Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 49.0% · 98.9th | 2023-10-02 | 2023-10-23KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.490. | |||||||
| 637 | CVE-2014-4404Apple — Apple OS X Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 48.9% · 98.9th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.489. | |||||||
| 638 | CVE-2019-15752Docker — Docker Desktop Community Edition Privilege Escalation VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 48.6% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.486. | |||||||
| 639 | CVE-2022-23227NUUO — NUUO NVRmini2 Devices Missing Authentication VulnerabilityKEV since 2024 · listed over a year | 75 | 9.8 | 48.5% · 98.9th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.485. | |||||||
| 640 | CVE-2020-16009Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 48.3% · 98.9th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.483. | |||||||
| 641 | CVE-2016-1646Google — Google Chromium V8 Out-of-Bounds Read VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.481. | |||||||
| 642 | CVE-2018-5430TIBCO — TIBCO JasperReports Server Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 48.1% · 98.9th | 2022-12-29 | 2023-01-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.481. | |||||||
| 643 | CVE-2013-2094Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 8.4 | 47.7% · 98.8th | 2022-09-15 | 2022-10-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.477. | |||||||
| 644 | CVE-2021-40407Reolink — Reolink RLC-410W IP Camera OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 47.6% · 98.8th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.476. | |||||||
| 645 | CVE-2016-3976SAP — SAP NetWeaver Directory Traversal VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 47.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.473. | |||||||
| 646 | CVE-2022-39197Fortra — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 46.4% · 98.8th | 2023-03-30 | 2023-04-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.464. | |||||||
| 647 | CVE-2019-17026Mozilla — Mozilla Firefox And Thunderbird Type Confusion VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 46.3% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.463. | |||||||
| 648 | CVE-2017-6862NETGEAR — NETGEAR Multiple Devices Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 45.7% · 98.8th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.457. | |||||||
| 649 | CVE-2017-16651Roundcube — Roundcube Webmail File Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 45.7% · 98.8th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.457. | |||||||
| 650 | CVE-2017-6737Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 45.2% · 98.8th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.452. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsLinux — Linux Kernel Improper Privilege Management Vulnerability
EVRS 75 Urgent
Rank 626 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 52.2% 99th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 627 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 51.9% 99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
SonicWall — SonicWall Email Security Path Traversal Vulnerability
EVRS 75 Urgent
Rank 628 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 4.9 NVD
- EPSS
- 51.7% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Apple — Apple Multiple Products Integer Overflow Vulnerability
EVRS 75 Urgent
Rank 629 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 51.5% 98.9th percentile
- In CISA KEV since
- 2023-06-23
- CISA deadline
- 2023-07-14 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
D-Link — D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 630 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.4 NVD
- EPSS
- 50.8% 98.9th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
FXC — FXC AE1021, AE1021PE OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 631 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 50.4% 98.9th percentile
- In CISA KEV since
- 2023-12-21
- CISA deadline
- 2024-01-11 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- FXC
- Source
- CISA KEV
Google — Google Chrome WebAudio Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 632 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 49.4% 98.9th percentile
- In CISA KEV since
- 2022-05-23
- CISA deadline
- 2022-06-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
VMware — VMware vCenter Server Improper Access Control
EVRS 75 Urgent
Rank 633 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 5.3 NVD
- EPSS
- 49.2% 98.9th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-01-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 634 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 49.2% 98.9th percentile
- In CISA KEV since
- 2022-10-20
- CISA deadline
- 2022-11-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 635 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.1 NVD
- EPSS
- 49.1% 98.9th percentile
- In CISA KEV since
- 2023-07-27
- CISA deadline
- 2023-08-17 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Google — Google Chromium libvpx Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 636 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 49.0% 98.9th percentile
- In CISA KEV since
- 2023-10-02
- CISA deadline
- 2023-10-23 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple OS X Heap-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 637 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 48.9% 98.9th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Docker — Docker Desktop Community Edition Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 638 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 48.6% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Docker
- Source
- CISA KEV
NUUO — NUUO NVRmini2 Devices Missing Authentication Vulnerability
EVRS 75 Urgent
Rank 639 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 48.5% 98.9th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- NUUO
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 640 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.3% 98.9th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Read Vulnerability
EVRS 75 Urgent
Rank 641 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.1% 98.9th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
TIBCO — TIBCO JasperReports Server Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 642 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 48.1% 98.9th percentile
- In CISA KEV since
- 2022-12-29
- CISA deadline
- 2023-01-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- TIBCO
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 643 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.4 NVD
- EPSS
- 47.7% 98.8th percentile
- In CISA KEV since
- 2022-09-15
- CISA deadline
- 2022-10-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
Reolink — Reolink RLC-410W IP Camera OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 644 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.2 NVD
- EPSS
- 47.6% 98.8th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Reolink
- Source
- CISA KEV
SAP — SAP NetWeaver Directory Traversal Vulnerability
EVRS 75 Urgent
Rank 645 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.5 NVD
- EPSS
- 47.3% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Fortra — Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 646 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 6.1 NVD
- EPSS
- 46.4% 98.8th percentile
- In CISA KEV since
- 2023-03-30
- CISA deadline
- 2023-04-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortra
- Source
- CISA KEV
Mozilla — Mozilla Firefox And Thunderbird Type Confusion Vulnerability
EVRS 75 Urgent
Rank 647 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 46.3% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Mozilla
- Source
- CISA KEV
NETGEAR — NETGEAR Multiple Devices Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 648 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 9.8 NVD
- EPSS
- 45.7% 98.8th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- NETGEAR
- Source
- CISA KEV
Roundcube — Roundcube Webmail File Disclosure Vulnerability
EVRS 75 Urgent
Rank 649 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 7.8 NVD
- EPSS
- 45.7% 98.8th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 650 of 2,962 tracked · as of 23 Oct 05:59 UTC
- CVSS
- 8.8 NVD
- EPSS
- 45.2% 98.8th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
