Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 676 | CVE-2019-11001Reolink — Reolink Multiple IP Cameras OS Command Injection VulnerabilityKEV since 2024 · listed over a year | 75 | 7.2 | 37.5% · 98.5th | 2024-12-18 | 2025-01-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.375. | |||||||
| 677 | CVE-2014-3153Linux — Linux Kernel Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 37.2% · 98.5th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.372. | |||||||
| 678 | CVE-2021-38163SAP — SAP NetWeaver Unrestricted File Upload VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 36.9% · 98.5th | 2022-06-09 | 2022-06-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.369. | |||||||
| 679 | CVE-2018-4990Adobe — Adobe Acrobat and Reader Double Free VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 680 | CVE-2020-5735Amcrest — Amcrest Cameras and NVR Stack-based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 681 | CVE-2020-13671Drupal — Drupal core Un-restricted Upload of FileKEV since 2022 · listed over a year | 75 | 8.8 | 36.2% · 98.5th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.362. | |||||||
| 682 | CVE-2017-6327Symantec — Symantec Messaging Gateway Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 35.9% · 98.5th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.359. | |||||||
| 683 | CVE-2018-17480Google — Google Chromium V8 Out-of-Bounds Write VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 35.6% · 98.5th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.356. | |||||||
| 684 | CVE-2022-22960VMware — VMware Multiple Products Privilege Escalation VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 35.5% · 98.5th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.355. | |||||||
| 685 | CVE-2021-37975Google — Google Chromium V8 Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 8.8 | 34.9% · 98.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.349. | |||||||
| 686 | CVE-2016-5198Google — Google Chromium V8 Out-of-Bounds Memory VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 34.2% · 98.4th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.342. | |||||||
| 687 | CVE-2020-2509QNAP — QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 34.0% · 98.4th | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.340. | |||||||
| 688 | CVE-2022-40799D-Link — D-Link DNR-322L Download of Code Without Integrity Check VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 33.7% · 98.4th | 2025-08-05 | 2025-08-26KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.337. | |||||||
| 689 | CVE-2018-13383Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds WriteRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 33.6% · 98.4th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 690 | CVE-2016-4655Apple — Apple iOS Information Disclosure VulnerabilityKEV since 2022 · listed over a year | 75 | 5.5 | 33.4% · 98.4th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.334. | |||||||
| 691 | CVE-2021-30633Google — Google Chromium Indexed DB API Use-After-Free VulnerabilityKEV since 2021 · listed over a year | 75 | 9.6 | 33.2% · 98.4th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.332. | |||||||
| 692 | CVE-2020-8195Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure VulnerabilityKEV since 2021 · listed over a year | 75 | 6.5 | 33.0% · 98.4th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.330. | |||||||
| 693 | CVE-2017-6884Zyxel — Zyxel EMG2926 Routers Command Injection VulnerabilityRansomwareKEV since 2023 · listed over a year | 75 | 8.8 | 33.0% · 98.4th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 694 | CVE-2020-35730Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityKEV since 2023 · listed over a year | 75 | 6.1 | 32.9% · 98.4th | 2023-06-22 | 2023-07-13KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.329. | |||||||
| 695 | CVE-2013-0641Adobe — Adobe Reader Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 7.8 | 32.3% · 98.3rd | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 696 | CVE-2024-57968Advantive — Advantive VeraCore Unrestricted File Upload VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 32.3% · 98.3rd | 2025-03-10 | 2025-03-31KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 697 | CVE-2020-8218Pulse Secure — Pulse Connect Secure Code Injection VulnerabilityKEV since 2022 · listed over a year | 75 | 7.2 | 32.2% · 98.3rd | 2022-03-07 | 2022-09-07KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.323. | |||||||
| 698 | CVE-2017-5070Google — Google Chromium V8 Type Confusion VulnerabilityKEV since 2022 · listed over a year | 75 | 8.8 | 32.1% · 98.3rd | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.321. | |||||||
| 699 | CVE-2025-43300Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 10.0 | 32.0% · 98.3rd | 2025-08-21 | 2025-09-11KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.320. | |||||||
| 700 | CVE-2022-4135Google — Google Chromium GPU Heap Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.6 | 31.9% · 98.3rd | 2022-11-28 | 2022-12-19KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.319. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsReolink — Reolink Multiple IP Cameras OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 676 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 37.5% 98.5th percentile
- In CISA KEV since
- 2024-12-18
- CISA deadline
- 2025-01-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Reolink
- Source
- CISA KEV
Linux — Linux Kernel Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 677 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 37.2% 98.5th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Linux
- Source
- CISA KEV
SAP — SAP NetWeaver Unrestricted File Upload Vulnerability
EVRS 75 Urgent
Rank 678 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.9% 98.5th percentile
- In CISA KEV since
- 2022-06-09
- CISA deadline
- 2022-06-30 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- SAP
- Source
- CISA KEV
Adobe — Adobe Acrobat and Reader Double Free Vulnerability
EVRS 75 Urgent
Rank 679 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Amcrest — Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 680 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Amcrest
- Source
- CISA KEV
Drupal — Drupal core Un-restricted Upload of File
EVRS 75 Urgent
Rank 681 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 36.2% 98.5th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Drupal
- Source
- CISA KEV
Symantec — Symantec Messaging Gateway Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 682 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 35.9% 98.5th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Symantec
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 683 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 35.6% 98.5th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
VMware — VMware Multiple Products Privilege Escalation Vulnerability
EVRS 75 Urgent
Rank 684 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 35.5% 98.5th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Google — Google Chromium V8 Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 685 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 34.9% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Google — Google Chromium V8 Out-of-Bounds Memory Vulnerability
EVRS 75 Urgent
Rank 686 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 34.2% 98.4th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
QNAP — QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
EVRS 75 Urgent
Rank 687 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 34.0% 98.4th percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- QNAP
- Source
- CISA KEV
D-Link — D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
EVRS 75 Urgent
Rank 688 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 33.7% 98.4th percentile
- In CISA KEV since
- 2025-08-05
- CISA deadline
- 2025-08-26 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Out-of-bounds Write
EVRS 75 Urgent
Rank 689 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 33.6% 98.4th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Apple — Apple iOS Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 690 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.5 NVD
- EPSS
- 33.4% 98.4th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium Indexed DB API Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 691 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.6 NVD
- EPSS
- 33.2% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Citrix — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
EVRS 75 Urgent
Rank 692 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 33.0% 98.4th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
Zyxel — Zyxel EMG2926 Routers Command Injection Vulnerability
EVRS 75 Urgent
Rank 693 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 33.0% 98.4th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Zyxel
- Source
- CISA KEV
Roundcube — Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 694 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 32.9% 98.4th percentile
- In CISA KEV since
- 2023-06-22
- CISA deadline
- 2023-07-13 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Roundcube
- Source
- CISA KEV
Adobe — Adobe Reader Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 695 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 32.3% 98.3rd percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Advantive — Advantive VeraCore Unrestricted File Upload Vulnerability
EVRS 75 Urgent
Rank 696 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 32.3% 98.3rd percentile
- In CISA KEV since
- 2025-03-10
- CISA deadline
- 2025-03-31 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Advantive
- Source
- CISA KEV
Pulse Secure — Pulse Connect Secure Code Injection Vulnerability
EVRS 75 Urgent
Rank 697 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 32.2% 98.3rd percentile
- In CISA KEV since
- 2022-03-07
- CISA deadline
- 2022-09-07 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Pulse Secure
- Source
- CISA KEV
Google — Google Chromium V8 Type Confusion Vulnerability
EVRS 75 Urgent
Rank 698 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 32.1% 98.3rd percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
Apple — Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 699 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 10.0 NVD
- EPSS
- 32.0% 98.3rd percentile
- In CISA KEV since
- 2025-08-21
- CISA deadline
- 2025-09-11 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Google — Google Chromium GPU Heap Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 700 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.6 NVD
- EPSS
- 31.9% 98.3rd percentile
- In CISA KEV since
- 2022-11-28
- CISA deadline
- 2022-12-19 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Source
- CISA KEV
