Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

RSS feed Export CSV Subscribe to deadlines (ICS)

Views and filters 1 filter on

Ranked by EVRS

1,099 match · filtered from 2,960 Sort

All 25 rows on this page are CISA KEV Ransomware Exigent. Rows show only what differs.

Priority Feed, rows 51 to 75
#	CVE · title	EVRS	CVSS	EPSS	In KEV since	CISA deadline
51	CVE-2022-47966Zoho — Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.8% · 99.95th	2023-01-23	2023-02-13KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
52	CVE-2023-3519Citrix — Citrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.7% · 99.95th	2023-07-19	2023-08-09KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
53	CVE-2019-11043PHP — PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
54	CVE-2010-2861Adobe — Adobe ColdFusion Directory Traversal VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
55	CVE-2019-18935Progress — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year	94	9.8	99.7% · 99.95th	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
56	CVE-2021-22205GitLab — GitLab Community and Enterprise Editions Remote Code Execution VulnerabilityKEV since 2021 · listed over a year	94	10.0	99.7% · 99.95th	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
57	CVE-2019-15107Webmin — Webmin Command Injection VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.7% · 99.95th	2022-03-25	2022-04-15KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
58	CVE-2024-23692Rejetto — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityKEV since 2024 · listed over a year	94	9.8	99.5% · 99.94th	2024-07-09	2024-07-30KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
59	CVE-2022-42475Fortinet — Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.5% · 99.94th	2022-12-13	2023-01-03KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
60	CVE-2017-7494Samba — Samba Remote Code Execution VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.4% · 99.94th	2023-03-30	2023-04-20KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
61	CVE-2023-22515Atlassian — Atlassian Confluence Data Center and Server Broken Access Control VulnerabilityKEV since 2023 · listed over a year	94	9.8	99.2% · 99.94th	2023-10-05	2023-10-13KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
62	CVE-2018-7602Drupal — Drupal Core Remote Code Execution VulnerabilityKEV since 2022 · listed over a year	94	9.8	99.2% · 99.94th	2022-04-13	2022-05-04KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
63	CVE-2024-50623Cleo — Cleo Multiple Products Unrestricted File Upload VulnerabilityKEV since 2024 · listed over a year	94	9.8	98.6% · 99.92nd	2024-12-13	2025-01-03KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
64	CVE-2021-40438Apache — Apache HTTP Server-Side Request Forgery (SSRF)KEV since 2021 · listed over a year	93	9.0	100.0% · 99.99th	2021-12-01	2021-12-15KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
65	CVE-2024-21887Ivanti — Ivanti Connect Secure and Policy Secure Command Injection VulnerabilityKEV since 2024 · listed over a year	93	9.1	100.0% · 99.99th	2024-01-10	2024-01-22KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
66	CVE-2021-45046Apache — Apache Log4j2 Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year	93	9.0	100.0% · 99.98th	2023-05-01	2023-05-22KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
67	CVE-2021-44529Ivanti — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection VulnerabilityKEV since 2024 · listed over a year	93	9.8	99.1% · 99.93rd	2024-03-25	2024-04-15KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
68	CVE-2021-40539Zoho — Zoho ManageEngine ADSelfService Plus Authentication Bypass VulnerabilityKEV since 2021 · listed over a year	93	9.8	99.0% · 99.93rd	2021-11-03	2021-11-17KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
69	CVE-2023-47246SysAid — SysAid Server Path Traversal VulnerabilityKEV since 2023 · listed over a year	93	9.8	98.9% · 99.93rd	2023-11-13	2023-12-04KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
70	CVE-2013-2465Oracle — Oracle Java SE Unspecified VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.8% · 99.93rd	2022-03-28	2022-04-18KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
71	CVE-2012-4681Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.5% · 99.92nd	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
72	CVE-2023-48788Fortinet — Fortinet FortiClient EMS SQL Injection VulnerabilityKEV since 2024 · listed over a year	93	9.8	98.4% · 99.92nd	2024-03-25	2024-04-15KEV since 2024 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
73	CVE-2022-21587Oracle — Oracle E-Business Suite Unspecified VulnerabilityKEV since 2023 · listed over a year	93	9.8	98.3% · 99.92nd	2023-02-02	2023-02-23KEV since 2023 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV Vendor Advisory
74	CVE-2012-0507Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year	93	9.8	98.2% · 99.91st	2022-03-03	2022-03-24KEV since 2022 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV
75	CVE-2019-5544VMware — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow VulnerabilityKEV since 2021 · listed over a year	93	9.8	98.1% · 99.91st	2021-11-03	2022-05-03KEV since 2021 · listed over a year
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. Open CVE page NVD CISA KEV

Rows per page

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics