Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 101 | CVE-2023-38831RARLAB — RARLAB WinRAR Code Execution VulnerabilityKEV since 2023 · listed over a year | 91 | 7.8 | 99.8% · 99.96th | 2023-08-24 | 2023-09-14KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 102 | CVE-2008-2992Adobe — Adobe Reader and Acrobat Input Validation VulnerabilityKEV since 2022 · listed over a year | 91 | 7.8 | 99.8% · 99.96th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 103 | CVE-2017-12615Apache — Apache Tomcat on Windows Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 91 | 8.1 | 99.6% · 99.95th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 104 | CVE-2024-57727SimpleHelp — SimpleHelp Path Traversal VulnerabilityKEV since 2025 · listed over a year | 91 | 7.5 | 96.6% · 99.88th | 2025-02-13 | 2025-03-06KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 105 | CVE-2025-61884Oracle — Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEV since 2025 · listed over a year | 91 | 7.5 | 95.9% · 99.88th | 2025-10-20 | 2025-11-10KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 106 | CVE-2017-9822DotNetNuke (DNN) — DotNetNuke (DNN) Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 91 | 8.8 | 94.8% · 99.86th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 107 | CVE-2025-8088RARLAB — RARLAB WinRAR Path Traversal VulnerabilityKEV since 2025 · listed over a year | 91 | 8.4 | 94.5% · 99.86th | 2025-08-12 | 2025-09-02KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 108 | CVE-2022-26352dotCMS — dotCMS Unrestricted Upload of File VulnerabilityExigentKEV since 2022 · listed over a year | 91 | 9.8 | 91.2% · 99.81st | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 109 | CVE-2017-12149Red Hat — Red Hat JBoss Application Server Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 91 | 9.8 | 90.7% · 99.81st | 2021-12-10 | 2022-06-10KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 110 | CVE-2024-40711Veeam — Veeam Backup and Replication Deserialization VulnerabilityExigentKEV since 2024 · listed over a year | 91 | 9.8 | 90.4% · 99.8th | 2024-10-17 | 2024-11-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 111 | CVE-2019-7195QNAP — QNAP Photo Station Path Traversal VulnerabilityExigentKEV since 2022 · listed over a year | 91 | 9.8 | 89.7% · 99.79th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 112 | CVE-2021-20021SonicWall — SonicWall Email Security Improper Privilege Management VulnerabilityExigentKEV since 2021 · listed over a year | 91 | 9.8 | 88.8% · 99.78th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 113 | CVE-2023-41265Qlik — Qlik Sense HTTP Tunneling VulnerabilityExigentKEV since 2023 · listed over a year | 91 | 9.9 | 88.2% · 99.77th | 2023-12-07 | 2023-12-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 114 | CVE-2019-7192QNAP — QNAP Photo Station Improper Access Control VulnerabilityExigentKEV since 2022 · listed over a year | 91 | 9.8 | 88.1% · 99.77th | 2022-06-08 | 2022-06-22KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 115 | CVE-2024-51567CyberPersons — CyberPanel Incorrect Default Permissions VulnerabilityExigentKEV since 2024 · listed over a year | 91 | 9.8 | 84.4% · 99.7th | 2024-11-07 | 2024-11-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 116 | CVE-2023-0669Fortra — Fortra GoAnywhere MFT Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 90 | 7.2 | 100.0% · 99.99th | 2023-02-10 | 2023-03-03KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 117 | CVE-2022-30333RARLAB — RARLAB UnRAR Directory Traversal VulnerabilityKEV since 2022 · listed over a year | 90 | 7.5 | 99.2% · 99.94th | 2022-08-09 | 2022-08-30KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 118 | CVE-2022-27925Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload VulnerabilityKEV since 2022 · listed over a year | 90 | 7.2 | 98.7% · 99.92nd | 2022-08-11 | 2022-09-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 119 | CVE-2019-11539Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection VulnerabilityKEV since 2021 · listed over a year | 90 | 7.2 | 98.5% · 99.92nd | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 120 | CVE-2018-20250RARLAB — WinRAR Absolute Path Traversal VulnerabilityKEV since 2022 · listed over a year | 90 | 7.8 | 96.0% · 99.88th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 121 | CVE-2021-4034Red Hat — Red Hat Polkit Out-of-Bounds Read and Write VulnerabilityKEV since 2022 · listed over a year | 90 | 7.8 | 94.9% · 99.86th | 2022-06-27 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 122 | CVE-2023-40044Progress — Progress WS_FTP Server Deserialization of Untrusted Data VulnerabilityKEV since 2023 · listed over a year | 90 | 8.8 | 90.4% · 99.8th | 2023-10-05 | 2023-10-26KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 123 | CVE-2022-27593QNAP — QNAP Photo Station Externally Controlled Reference VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.1 | 87.9% · 99.77th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 124 | CVE-2017-18362Kaseya — Kaseya VSA SQL Injection VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.8 | 86.8% · 99.75th | 2022-05-24 | 2022-06-14KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 125 | CVE-2019-16057D-Link — D-Link DNS-320 Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 90 | 9.8 | 86.5% · 99.74th | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsRARLAB — RARLAB WinRAR Code Execution Vulnerability
EVRS 91 Immediate
Rank 101 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2023-08-24
- CISA deadline
- 2023-09-14 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
Adobe — Adobe Reader and Acrobat Input Validation Vulnerability
EVRS 91 Immediate
Rank 102 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Apache — Apache Tomcat on Windows Remote Code Execution Vulnerability
EVRS 91 Immediate
Rank 103 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.1 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Apache
- Source
- CISA KEV
SimpleHelp — SimpleHelp Path Traversal Vulnerability
EVRS 91 Immediate
Rank 104 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 96.6% 99.88th percentile
- In CISA KEV since
- 2025-02-13
- CISA deadline
- 2025-03-06 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
Oracle — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
EVRS 91 Immediate
Rank 105 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 95.9% 99.88th percentile
- In CISA KEV since
- 2025-10-20
- CISA deadline
- 2025-11-10 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- Oracle
- Source
- CISA KEV
DotNetNuke (DNN) — DotNetNuke (DNN) Remote Code Execution Vulnerability
EVRS 91 Immediate
Rank 106 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 94.8% 99.86th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- DotNetNuke (DNN)
- Source
- CISA KEV
RARLAB — RARLAB WinRAR Path Traversal Vulnerability
EVRS 91 Immediate
Rank 107 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.4 NVD
- EPSS
- 94.5% 99.86th percentile
- In CISA KEV since
- 2025-08-12
- CISA deadline
- 2025-09-02 KEV since 2025 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
dotCMS — dotCMS Unrestricted Upload of File Vulnerability
EVRS 91 Immediate
Rank 108 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 91.2% 99.81st percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- dotCMS
- Source
- CISA KEV
Red Hat — Red Hat JBoss Application Server Remote Code Execution Vulnerability
EVRS 91 Immediate
Rank 109 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.7% 99.81st percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2022-06-10 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Veeam — Veeam Backup and Replication Deserialization Vulnerability
EVRS 91 Immediate
Rank 110 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2024-10-17
- CISA deadline
- 2024-11-07 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- Veeam
- Source
- CISA KEV
QNAP — QNAP Photo Station Path Traversal Vulnerability
EVRS 91 Immediate
Rank 111 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 89.7% 99.79th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
SonicWall — SonicWall Email Security Improper Privilege Management Vulnerability
EVRS 91 Immediate
Rank 112 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.8% 99.78th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- SonicWall
- Source
- CISA KEV
Qlik — Qlik Sense HTTP Tunneling Vulnerability
EVRS 91 Immediate
Rank 113 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.9 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2023-12-07
- CISA deadline
- 2023-12-28 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Qlik
- Source
- CISA KEV
QNAP — QNAP Photo Station Improper Access Control Vulnerability
EVRS 91 Immediate
Rank 114 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 88.1% 99.77th percentile
- In CISA KEV since
- 2022-06-08
- CISA deadline
- 2022-06-22 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
CyberPersons — CyberPanel Incorrect Default Permissions Vulnerability
EVRS 91 Immediate
Rank 115 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 84.4% 99.7th percentile
- In CISA KEV since
- 2024-11-07
- CISA deadline
- 2024-11-28 KEV since 2024 · listed over a year
- Ransomware use
- Known
- Vendor
- CyberPersons
- Source
- CISA KEV
Fortra — Fortra GoAnywhere MFT Remote Code Execution Vulnerability
EVRS 90 Immediate
Rank 116 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-02-10
- CISA deadline
- 2023-03-03 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Fortra
- Source
- CISA KEV
RARLAB — RARLAB UnRAR Directory Traversal Vulnerability
EVRS 90 Immediate
Rank 117 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.2% 99.94th percentile
- In CISA KEV since
- 2022-08-09
- CISA deadline
- 2022-08-30 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
EVRS 90 Immediate
Rank 118 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 98.7% 99.92nd percentile
- In CISA KEV since
- 2022-08-11
- CISA deadline
- 2022-09-01 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Synacor
- Source
- CISA KEV
Ivanti — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
EVRS 90 Immediate
Rank 119 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.2 NVD
- EPSS
- 98.5% 99.92nd percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Known
- Vendor
- Ivanti
- Source
- CISA KEV
RARLAB — WinRAR Absolute Path Traversal Vulnerability
EVRS 90 Immediate
Rank 120 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 96.0% 99.88th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- RARLAB
- Source
- CISA KEV
Red Hat — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
EVRS 90 Immediate
Rank 121 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 94.9% 99.86th percentile
- In CISA KEV since
- 2022-06-27
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Red Hat
- Source
- CISA KEV
Progress — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
EVRS 90 Immediate
Rank 122 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 8.8 NVD
- EPSS
- 90.4% 99.8th percentile
- In CISA KEV since
- 2023-10-05
- CISA deadline
- 2023-10-26 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Progress
- Source
- CISA KEV
QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability
EVRS 90 Immediate
Rank 123 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 87.9% 99.77th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Kaseya — Kaseya VSA SQL Injection Vulnerability
EVRS 90 Immediate
Rank 124 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.8% 99.75th percentile
- In CISA KEV since
- 2022-05-24
- CISA deadline
- 2022-06-14 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Kaseya
- Source
- CISA KEV
D-Link — D-Link DNS-320 Remote Code Execution Vulnerability
EVRS 90 Immediate
Rank 125 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 86.5% 99.74th percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- D-Link
- Source
- CISA KEV
