Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 151 | CVE-2010-0188Adobe — Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 88 | 7.8 | 88.2% · 99.77th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 152 | CVE-2021-28799QNAP — QNAP NAS Improper Authorization VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 88 | 9.8 | 78.2% · 99.58th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 153 | CVE-2017-11357Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityRansomwareExigentKEV since 2023 · listed over a year | 88 | 9.8 | 77.7% · 99.57th | 2023-01-26 | 2023-02-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 154 | CVE-2014-6271GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 155 | CVE-2017-9841PHPUnit — PHPUnit Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 156 | CVE-2021-1498Cisco — Cisco HyperFlex HX Data Platform Command Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 157 | CVE-2023-1671Sophos — Sophos Web Appliance Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2023-11-16 | 2023-12-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 158 | CVE-2024-7593Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-09-24 | 2024-10-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 159 | CVE-2012-1823PHP — PHP-CGI Query String Parameter VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 160 | CVE-2013-2251Apache — Apache Struts Improper Input Validation VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 161 | CVE-2020-14882Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 162 | CVE-2019-16920D-Link — D-Link Multiple Routers Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 163 | CVE-2022-44877CWP — CWP Control Web Panel OS Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2023-01-17 | 2023-02-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 164 | CVE-2024-3273D-Link — D-Link Multiple NAS Devices Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-04-11 | 2024-05-02KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 165 | CVE-2024-34102Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 166 | CVE-2020-8515DrayTek — Multiple DrayTek Vigor Routers Web Management Page VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 167 | CVE-2021-33044Dahua — Dahua IP Camera Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 168 | CVE-2020-9054Zyxel — Zyxel Multiple NAS Devices OS Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 169 | CVE-2019-9670Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 170 | CVE-2021-20090Arcadyan — Arcadyan Buffalo Firmware Path Traversal VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 171 | CVE-2014-8361Realtek — Realtek SDK Improper Input Validation VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 172 | CVE-2020-25506D-Link — D-Link DNS-320 Device Command Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 173 | CVE-2019-10149Exim — Exim Mail Transfer Agent (MTA) Improper Input ValidationExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 174 | CVE-2018-2628Oracle — Oracle WebLogic Server Unspecified VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-09-08 | 2022-09-29KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 175 | CVE-2024-38475Apache — Apache HTTP Server Improper Escaping of Output VulnerabilityExigentKEV since 2025 · listed over a year | 87 | 9.1 | 100.0% · 99.98th | 2025-05-01 | 2025-05-22KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
EVRS 88 Immediate
Rank 151 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 7.8 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
QNAP — QNAP NAS Improper Authorization Vulnerability
EVRS 88 Immediate
Rank 152 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.2% 99.58th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
EVRS 88 Immediate
Rank 153 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 77.7% 99.57th percentile
- In CISA KEV since
- 2023-01-26
- CISA deadline
- 2023-02-16 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Telerik
- Source
- CISA KEV
GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
EVRS 87 Immediate
Rank 154 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
PHPUnit — PHPUnit Command Injection Vulnerability
EVRS 87 Immediate
Rank 155 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PHPUnit
- Source
- CISA KEV
Cisco — Cisco HyperFlex HX Data Platform Command Injection Vulnerability
EVRS 87 Immediate
Rank 156 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Sophos — Sophos Web Appliance Command Injection Vulnerability
EVRS 87 Immediate
Rank 157 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-11-16
- CISA deadline
- 2023-12-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 158 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-09-24
- CISA deadline
- 2024-10-15 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
PHP — PHP-CGI Query String Parameter Vulnerability
EVRS 87 Immediate
Rank 159 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PHP
- Source
- CISA KEV
Apache — Apache Struts Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 160 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 161 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
D-Link — D-Link Multiple Routers Command Injection Vulnerability
EVRS 87 Immediate
Rank 162 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
CWP — CWP Control Web Panel OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 163 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-01-17
- CISA deadline
- 2023-02-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- CWP
- Source
- CISA KEV
D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability
EVRS 87 Immediate
Rank 164 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-04-11
- CISA deadline
- 2024-05-02 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
EVRS 87 Immediate
Rank 165 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
DrayTek — Multiple DrayTek Vigor Routers Web Management Page Vulnerability
EVRS 87 Immediate
Rank 166 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Dahua — Dahua IP Camera Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 167 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dahua
- Source
- CISA KEV
Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 168 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
EVRS 87 Immediate
Rank 169 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Arcadyan — Arcadyan Buffalo Firmware Path Traversal Vulnerability
EVRS 87 Immediate
Rank 170 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arcadyan
- Source
- CISA KEV
Realtek — Realtek SDK Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 171 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
D-Link — D-Link DNS-320 Device Command Injection Vulnerability
EVRS 87 Immediate
Rank 172 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Exim — Exim Mail Transfer Agent (MTA) Improper Input Validation
EVRS 87 Immediate
Rank 173 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Exim
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Unspecified Vulnerability
EVRS 87 Immediate
Rank 174 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-09-08
- CISA deadline
- 2022-09-29 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
Apache — Apache HTTP Server Improper Escaping of Output Vulnerability
EVRS 87 Immediate
Rank 175 of 2,960 tracked · as of 22 Oct 12:50 UTC
- CVSS
- 9.1 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2025-05-01
- CISA deadline
- 2025-05-22 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
