Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 76 | CVE-2021-42237Sitecore — Sitecore XP Remote Command Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.6% · 99.9th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 77 | CVE-2024-41713Mitel — Mitel MiCollab Path Traversal VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.1 | 97.2% · 99.9th | 2025-01-07 | 2025-01-28KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 78 | CVE-2023-38203Adobe — Adobe ColdFusion Deserialization of Untrusted Data VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 97.1% · 99.89th | 2024-01-08 | 2024-01-29KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 79 | CVE-2013-0422Oracle — Oracle JRE Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.0% · 99.89th | 2022-05-25 | 2022-06-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 80 | CVE-2018-1273VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 97.0% · 99.89th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 81 | CVE-2018-6530D-Link — D-Link Multiple Routers OS Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 96.7% · 99.89th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 82 | CVE-2023-46747F5 — F5 BIG-IP Configuration Utility Authentication Bypass VulnerabilityExigentKEV since 2023 · listed over a year | 93 | 9.8 | 96.5% · 99.88th | 2023-10-31 | 2023-11-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 83 | CVE-2022-41352Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityExigentKEV since 2022 · listed over a year | 93 | 9.8 | 95.5% · 99.87th | 2022-10-20 | 2022-11-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 84 | CVE-2024-53704SonicWall — SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.8 | 95.3% · 99.87th | 2025-02-18 | 2025-03-11KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 85 | CVE-2024-51378CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 94.7% · 99.86th | 2024-12-04 | 2024-12-25KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 86 | CVE-2024-55591Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityExigentKEV since 2025 · listed over a year | 93 | 9.8 | 94.3% · 99.85th | 2025-01-14 | 2025-01-21KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 87 | CVE-2024-55956Cleo — Cleo Multiple Products Unauthenticated File Upload VulnerabilityExigentKEV since 2024 · listed over a year | 93 | 9.8 | 94.0% · 99.85th | 2024-12-17 | 2025-01-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 88 | CVE-2024-21893Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2024 · listed over a year | 92 | 8.2 | 100.0% · 99.99th | 2024-01-31 | 2024-02-02KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 89 | CVE-2023-46805Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityKEV since 2024 · listed over a year | 92 | 8.2 | 100.0% · 99.98th | 2024-01-10 | 2024-01-22KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 90 | CVE-2024-24919Check Point — Check Point Quantum Security Gateways Information Disclosure VulnerabilityKEV since 2024 · listed over a year | 92 | 8.6 | 100.0% · 99.98th | 2024-05-30 | 2024-06-20KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 91 | CVE-2019-11580Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 92 | 9.8 | 95.4% · 99.87th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 92 | CVE-2016-4117Adobe — Adobe Flash Player Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 92 | 9.8 | 94.4% · 99.85th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 93 | CVE-2012-1723Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 92 | 9.8 | 93.6% · 99.84th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 94 | CVE-2024-6670Progress — Progress WhatsUp Gold SQL Injection VulnerabilityExigentKEV since 2024 · listed over a year | 92 | 9.8 | 93.0% · 99.83rd | 2024-09-16 | 2024-10-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 95 | CVE-2022-37042Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass VulnerabilityExigentKEV since 2022 · listed over a year | 92 | 9.8 | 91.9% · 99.82nd | 2022-08-11 | 2022-09-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 96 | CVE-2018-11138Quest — Quest KACE System Management Appliance Remote Command Execution VulnerabilityExigentKEV since 2022 · listed over a year | 92 | 9.8 | 91.7% · 99.82nd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 97 | CVE-2021-35211SolarWinds — SolarWinds Serv-U Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 92 | 10.0 | 91.2% · 99.81st | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 98 | CVE-2023-4966Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityKEV since 2023 · listed over a year | 91 | 7.5 | 100.0% · 99.99th | 2023-10-18 | 2023-11-08KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 99 | CVE-2017-10271Oracle — Oracle Corporation WebLogic Server Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 91 | 7.5 | 100.0% · 99.99th | 2022-02-10 | 2022-08-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 100 | CVE-2019-7481SonicWall — SonicWall SMA100 SQL Injection VulnerabilityKEV since 2021 · listed over a year | 91 | 7.5 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsSitecore — Sitecore XP Remote Command Execution Vulnerability
EVRS 93 Immediate
Rank 76 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.6% 99.9th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Sitecore
- Source
- CISA KEV
Mitel — Mitel MiCollab Path Traversal Vulnerability
EVRS 93 Immediate
Rank 77 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 97.2% 99.9th percentile
- In CISA KEV since
- 2025-01-07
- CISA deadline
- 2025-01-28 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Mitel
- Source
- CISA KEV
Adobe — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
EVRS 93 Immediate
Rank 78 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.1% 99.89th percentile
- In CISA KEV since
- 2024-01-08
- CISA deadline
- 2024-01-29 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle JRE Remote Code Execution Vulnerability
EVRS 93 Immediate
Rank 79 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2022-05-25
- CISA deadline
- 2022-06-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Data Commons Property Binder Vulnerability
EVRS 93 Immediate
Rank 80 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 97.0% 99.89th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
D-Link — D-Link Multiple Routers OS Command Injection Vulnerability
EVRS 93 Immediate
Rank 81 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.7% 99.89th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- D-Link
- Source
- CISA KEV
F5 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 82 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 96.5% 99.88th percentile
- In CISA KEV since
- 2023-10-31
- CISA deadline
- 2023-11-21 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- F5
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
EVRS 93 Immediate
Rank 83 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.5% 99.87th percentile
- In CISA KEV since
- 2022-10-20
- CISA deadline
- 2022-11-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
SonicWall — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
EVRS 93 Immediate
Rank 84 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.3% 99.87th percentile
- In CISA KEV since
- 2025-02-18
- CISA deadline
- 2025-03-11 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability
EVRS 93 Immediate
Rank 85 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.7% 99.86th percentile
- In CISA KEV since
- 2024-12-04
- CISA deadline
- 2024-12-25 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- CyberPersons
- Source
- CISA KEV
Fortinet — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
EVRS 93 Immediate
Rank 86 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.3% 99.85th percentile
- In CISA KEV since
- 2025-01-14
- CISA deadline
- 2025-01-21 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortinet
- Source
- CISA KEV
Cleo — Cleo Multiple Products Unauthenticated File Upload Vulnerability
EVRS 93 Immediate
Rank 87 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.0% 99.85th percentile
- In CISA KEV since
- 2024-12-17
- CISA deadline
- 2025-01-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Cleo
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
EVRS 92 Immediate
Rank 88 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-01-31
- CISA deadline
- 2024-02-02 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
EVRS 92 Immediate
Rank 89 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.2 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-01-10
- CISA deadline
- 2024-01-22 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
Check Point — Check Point Quantum Security Gateways Information Disclosure Vulnerability
EVRS 92 Immediate
Rank 90 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.6 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-05-30
- CISA deadline
- 2024-06-20 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Check Point
- Source
- CISA KEV
Atlassian — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
EVRS 92 Immediate
Rank 91 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 95.4% 99.87th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Atlassian
- Source
- CISA KEV
Adobe — Adobe Flash Player Arbitrary Code Execution Vulnerability
EVRS 92 Immediate
Rank 92 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 94.4% 99.85th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Oracle — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
EVRS 92 Immediate
Rank 93 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.6% 99.84th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
Progress — Progress WhatsUp Gold SQL Injection Vulnerability
EVRS 92 Immediate
Rank 94 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 93.0% 99.83rd percentile
- In CISA KEV since
- 2024-09-16
- CISA deadline
- 2024-10-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Progress
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
EVRS 92 Immediate
Rank 95 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.9% 99.82nd percentile
- In CISA KEV since
- 2022-08-11
- CISA deadline
- 2022-09-01 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Quest — Quest KACE System Management Appliance Remote Command Execution Vulnerability
EVRS 92 Immediate
Rank 96 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.7% 99.82nd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Quest
- Source
- CISA KEV
SolarWinds — SolarWinds Serv-U Remote Code Execution Vulnerability
EVRS 92 Immediate
Rank 97 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 10.0 NVD
- EPSS
- 91.2% 99.81st percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SolarWinds
- Source
- CISA KEV
Citrix — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
EVRS 91 Immediate
Rank 98 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-10-18
- CISA deadline
- 2023-11-08 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Citrix
- Source
- CISA KEV
Oracle — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
EVRS 91 Immediate
Rank 99 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-02-10
- CISA deadline
- 2022-08-10 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
SonicWall — SonicWall SMA100 SQL Injection Vulnerability
EVRS 91 Immediate
Rank 100 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
