Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,100 match · filtered from 2,962| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 701 | CVE-2024-11182MDaemon — MDaemon Email Server Cross-Site Scripting (XSS) VulnerabilityKEV since 2025 · listed over a year | 75 | 5.3 | 31.4% · 98.3rd | 2025-05-19 | 2025-06-09KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.314. | |||||||
| 702 | CVE-2016-4523Trihedral — Trihedral VTScada (formerly VTS) Denial-of-Service VulnerabilityKEV since 2022 · listed over a year | 75 | 7.5 | 31.2% · 98.3rd | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.312. | |||||||
| 703 | CVE-2025-0994Trimble — Trimble Cityworks Deserialization VulnerabilityKEV since 2025 · listed over a year | 75 | 8.6 | 31.1% · 98.3rd | 2025-02-07 | 2025-02-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.311. | |||||||
| 704 | CVE-2025-32756Fortinet — Fortinet Multiple Products Stack-Based Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 30.9% · 98.3rd | 2025-05-14 | 2025-06-04KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.309. | |||||||
| 705 | CVE-2022-24682Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 30.9% · 98.3rd | 2022-02-25 | 2022-03-11KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 706 | CVE-2018-19953QNAP — QNAP NAS File Station Cross-Site Scripting VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 30.5% · 98.2nd | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 707 | CVE-2021-27852Checkbox — Checkbox Survey Deserialization of Untrusted Data VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 30.3% · 98.2nd | 2022-04-11 | 2022-05-02KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.303. | |||||||
| 708 | CVE-2019-3568Meta Platforms — WhatsApp VOIP Stack Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 75 | 9.8 | 30.1% · 98.2nd | 2022-04-19 | 2022-05-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.301. | |||||||
| 709 | CVE-2019-13608Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 7.5 | 30.0% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 710 | CVE-2018-6882Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.1 | 29.8% · 98.2nd | 2022-04-19 | 2022-05-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 711 | CVE-2024-3393Palo Alto Networks — Palo Alto Networks PAN-OS Malicious DNS Packet VulnerabilityKEV since 2024 · listed over a year | 75 | 8.7 | 29.1% · 98.2nd | 2024-12-30 | 2025-01-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.291. | |||||||
| 712 | CVE-2023-33010Zyxel — Zyxel Multiple Firewalls Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 29.0% · 98.2nd | 2023-06-05 | 2023-06-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.290. | |||||||
| 713 | CVE-2014-3931Looking Glass — Multi-Router Looking Glass (MRLG) Buffer Overflow VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 29.0% · 98.2nd | 2025-07-07 | 2025-07-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.290. | |||||||
| 714 | CVE-2018-2380SAP — SAP Customer Relationship Management (CRM) Path Traversal VulnerabilityRansomwareKEV since 2021 · listed over a year | 75 | 6.6 | 28.9% · 98.2nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 715 | CVE-2021-30807Apple — Apple Multiple Products Memory Corruption VulnerabilityKEV since 2021 · listed over a year | 75 | 7.8 | 28.8% · 98.2nd | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.288. | |||||||
| 716 | CVE-2023-2533PaperCut — PaperCut NG/MF Cross-Site Request Forgery (CSRF) VulnerabilityKEV since 2025 · listed over a year | 75 | 8.8 | 28.8% · 98.2nd | 2025-07-28 | 2025-08-18KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.288. | |||||||
| 717 | CVE-2024-11120GeoVision — GeoVision Devices OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 75 | 9.8 | 28.4% · 98.1st | 2025-05-07 | 2025-05-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.284. | |||||||
| 718 | CVE-2020-3153Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityRansomwareKEV since 2022 · listed over a year | 75 | 6.5 | 28.3% · 98.1st | 2022-10-24 | 2022-11-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 719 | CVE-2019-19356Netis — Netis WF2419 Devices Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 75 | 7.5 | 28.2% · 98.1st | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.282. | |||||||
| 720 | CVE-2023-33009Zyxel — Zyxel Multiple Firewalls Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 75 | 9.8 | 28.1% · 98.1st | 2023-06-05 | 2023-06-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.281. | |||||||
| 721 | CVE-2024-1086Linux — Linux Kernel Use-After-Free VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.8 | 28.1% · 98.1st | 2024-05-30 | 2024-06-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 722 | CVE-2025-27363FreeType — FreeType Out-of-Bounds Write VulnerabilityKEV since 2025 · listed over a year | 75 | 8.1 | 27.8% · 98.1st | 2025-05-06 | 2025-05-27KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.278. | |||||||
| 723 | CVE-2023-28205Apple — Apple Multiple Products WebKit Use-After-Free VulnerabilityKEV since 2023 · listed over a year | 75 | 8.8 | 27.1% · 98th | 2023-04-10 | 2023-05-01KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.271. | |||||||
| 724 | CVE-2024-4978Justice AV Solutions — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code VulnerabilityKEV since 2024 · listed over a year | 75 | 8.7 | 26.9% · 98th | 2024-05-29 | 2024-06-19KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.269. | |||||||
| 725 | CVE-2024-37085VMware — VMware ESXi Authentication Bypass VulnerabilityRansomwareKEV since 2024 · listed over a year | 75 | 7.2 | 26.8% · 98th | 2024-07-30 | 2024-08-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsMDaemon — MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 701 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 5.3 NVD
- EPSS
- 31.4% 98.3rd percentile
- In CISA KEV since
- 2025-05-19
- CISA deadline
- 2025-06-09 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- MDaemon
- Source
- CISA KEV
Trihedral — Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
EVRS 75 Urgent
Rank 702 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 31.2% 98.3rd percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trihedral
- Source
- CISA KEV
Trimble — Trimble Cityworks Deserialization Vulnerability
EVRS 75 Urgent
Rank 703 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.6 NVD
- EPSS
- 31.1% 98.3rd percentile
- In CISA KEV since
- 2025-02-07
- CISA deadline
- 2025-02-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Trimble
- Source
- CISA KEV
Fortinet — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 704 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2025-05-14
- CISA deadline
- 2025-06-04 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Fortinet
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 705 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.9% 98.3rd percentile
- In CISA KEV since
- 2022-02-25
- CISA deadline
- 2022-03-11 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability
EVRS 75 Urgent
Rank 706 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 30.5% 98.2nd percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Checkbox — Checkbox Survey Deserialization of Untrusted Data Vulnerability
EVRS 75 Urgent
Rank 707 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.3% 98.2nd percentile
- In CISA KEV since
- 2022-04-11
- CISA deadline
- 2022-05-02 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Checkbox
- Source
- CISA KEV
Meta Platforms — WhatsApp VOIP Stack Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 708 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 30.1% 98.2nd percentile
- In CISA KEV since
- 2022-04-19
- CISA deadline
- 2022-05-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Meta Platforms
- Source
- CISA KEV
Citrix — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
EVRS 75 Urgent
Rank 709 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 30.0% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
EVRS 75 Urgent
Rank 710 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.1 NVD
- EPSS
- 29.8% 98.2nd percentile
- In CISA KEV since
- 2022-04-19
- CISA deadline
- 2022-05-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability
EVRS 75 Urgent
Rank 711 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.7 NVD
- EPSS
- 29.1% 98.2nd percentile
- In CISA KEV since
- 2024-12-30
- CISA deadline
- 2025-01-20 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 712 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.0% 98.2nd percentile
- In CISA KEV since
- 2023-06-05
- CISA deadline
- 2023-06-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Looking Glass — Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 713 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 29.0% 98.2nd percentile
- In CISA KEV since
- 2025-07-07
- CISA deadline
- 2025-07-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Looking Glass
- Source
- CISA KEV
SAP — SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
EVRS 75 Urgent
Rank 714 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.6 NVD
- EPSS
- 28.9% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SAP
- Source
- CISA KEV
Apple — Apple Multiple Products Memory Corruption Vulnerability
EVRS 75 Urgent
Rank 715 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 28.8% 98.2nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
PaperCut — PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability
EVRS 75 Urgent
Rank 716 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 28.8% 98.2nd percentile
- In CISA KEV since
- 2025-07-28
- CISA deadline
- 2025-08-18 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- PaperCut
- Source
- CISA KEV
GeoVision — GeoVision Devices OS Command Injection Vulnerability
EVRS 75 Urgent
Rank 717 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.4% 98.1st percentile
- In CISA KEV since
- 2025-05-07
- CISA deadline
- 2025-05-28 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- GeoVision
- Source
- CISA KEV
Cisco — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
EVRS 75 Urgent
Rank 718 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 6.5 NVD
- EPSS
- 28.3% 98.1st percentile
- In CISA KEV since
- 2022-10-24
- CISA deadline
- 2022-11-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Cisco
- Source
- CISA KEV
Netis — Netis WF2419 Devices Remote Code Execution Vulnerability
EVRS 75 Urgent
Rank 719 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.5 NVD
- EPSS
- 28.2% 98.1st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Netis
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls Buffer Overflow Vulnerability
EVRS 75 Urgent
Rank 720 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 9.8 NVD
- EPSS
- 28.1% 98.1st percentile
- In CISA KEV since
- 2023-06-05
- CISA deadline
- 2023-06-26 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Linux — Linux Kernel Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 721 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.8 NVD
- EPSS
- 28.1% 98.1st percentile
- In CISA KEV since
- 2024-05-30
- CISA deadline
- 2024-06-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Linux
- Source
- CISA KEV
FreeType — FreeType Out-of-Bounds Write Vulnerability
EVRS 75 Urgent
Rank 722 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.1 NVD
- EPSS
- 27.8% 98.1st percentile
- In CISA KEV since
- 2025-05-06
- CISA deadline
- 2025-05-27 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- FreeType
- Source
- CISA KEV
Apple — Apple Multiple Products WebKit Use-After-Free Vulnerability
EVRS 75 Urgent
Rank 723 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.8 NVD
- EPSS
- 27.1% 98th percentile
- In CISA KEV since
- 2023-04-10
- CISA deadline
- 2023-05-01 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apple
- Source
- CISA KEV
Justice AV Solutions — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability
EVRS 75 Urgent
Rank 724 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 8.7 NVD
- EPSS
- 26.9% 98th percentile
- In CISA KEV since
- 2024-05-29
- CISA deadline
- 2024-06-19 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Justice AV Solutions
- Source
- CISA KEV
VMware — VMware ESXi Authentication Bypass Vulnerability
EVRS 75 Urgent
Rank 725 of 2,962 tracked · as of 23 Oct 02:43 UTC
- CVSS
- 7.2 NVD
- EPSS
- 26.8% 98th percentile
- In CISA KEV since
- 2024-07-30
- CISA deadline
- 2024-08-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware
- Source
- CISA KEV
