Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
1,099 match · filtered from 2,960| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 176 | CVE-2018-15961Adobe — Adobe ColdFusion Unrestricted File Upload VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 177 | CVE-2022-30525Zyxel — Zyxel Multiple Firewalls OS Command Injection VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-05-16 | 2022-06-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 178 | CVE-2020-10189Zoho — Zoho ManageEngine Desktop Central File Upload VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 179 | CVE-2014-7169GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 180 | CVE-2022-22963VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-08-25 | 2022-09-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 181 | CVE-2021-1497Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 182 | CVE-2022-35405Zoho — Zoho ManageEngine Multiple Products Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-09-22 | 2022-10-13KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 183 | CVE-2024-32113Apache — Apache OFBiz Path Traversal VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-08-07 | 2024-08-28KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 184 | CVE-2022-24816OSGeo — OSGeo GeoServer JAI-EXT Code Injection VulnerabilityKEV since 2024 · listed over a year | 87 | 10.0 | 99.9% · 99.97th | 2024-06-26 | 2024-07-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 185 | CVE-2024-45519Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-10-03 | 2024-10-24KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 186 | CVE-2015-1427Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 187 | CVE-2020-7961Liferay — Liferay Portal Deserialization of Untrusted Data VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 188 | CVE-2014-0497Adobe — Adobe Flash Player Integer Underflow VulnerablityKEV since 2024 · listed over a year | 87 | 9.8 | 99.9% · 99.97th | 2024-09-17 | 2024-10-08KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 189 | CVE-2021-35394Realtek — Realtek Jungle SDK Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2021-12-10 | 2021-12-24KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 190 | CVE-2021-44515Zoho — Zoho Desktop Central Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2021-12-10 | 2021-12-24KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 191 | CVE-2021-36260Hikvision — Hikvision Improper Input ValidationKEV since 2022 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2022-01-10 | 2022-01-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 192 | CVE-2022-35914Teclib — Teclib GLPI Remote Code Execution VulnerabilityKEV since 2023 · listed over a year | 87 | 9.8 | 99.9% · 99.96th | 2023-03-07 | 2023-03-28KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 193 | CVE-2022-46169Cacti — Cacti Command Injection VulnerabilityKEV since 2023 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2023-02-16 | 2023-03-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 194 | CVE-2021-37415Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2021-12-01 | 2021-12-15KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 195 | CVE-2024-36401OSGeo — OSGeo GeoServer GeoTools Eval Injection VulnerabilityKEV since 2024 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2024-07-15 | 2024-08-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 196 | CVE-2015-3113Adobe — Adobe Flash Player Heap-Based Buffer Overflow VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-04-13 | 2022-05-04KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 197 | CVE-2022-1040Sophos — Sophos Firewall Authentication Bypass VulnerabilityKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 198 | CVE-2020-13927Apache — Apache Airflow's Experimental API Authentication BypassKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.96th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 199 | CVE-2020-15505Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 200 | CVE-2019-16759vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe ColdFusion Unrestricted File Upload Vulnerability
EVRS 87 Immediate
Rank 176 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 177 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-05-16
- CISA deadline
- 2022-06-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Zoho — Zoho ManageEngine Desktop Central File Upload Vulnerability
EVRS 87 Immediate
Rank 178 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
EVRS 87 Immediate
Rank 179 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
VMware Tanzu — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 180 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-08-25
- CISA deadline
- 2022-09-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware Tanzu
- Source
- CISA KEV
Cisco — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
EVRS 87 Immediate
Rank 181 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Zoho — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 182 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-09-22
- CISA deadline
- 2022-10-13 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Apache — Apache OFBiz Path Traversal Vulnerability
EVRS 87 Immediate
Rank 183 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-08-07
- CISA deadline
- 2024-08-28 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
OSGeo — OSGeo GeoServer JAI-EXT Code Injection Vulnerability
EVRS 87 Immediate
Rank 184 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-06-26
- CISA deadline
- 2024-07-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- OSGeo
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
EVRS 87 Immediate
Rank 185 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-10-03
- CISA deadline
- 2024-10-24 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Elastic — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 186 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Elastic
- Source
- CISA KEV
Liferay — Liferay Portal Deserialization of Untrusted Data Vulnerability
EVRS 87 Immediate
Rank 187 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Liferay
- Source
- CISA KEV
Adobe — Adobe Flash Player Integer Underflow Vulnerablity
EVRS 87 Immediate
Rank 188 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.97th percentile
- In CISA KEV since
- 2024-09-17
- CISA deadline
- 2024-10-08 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Realtek — Realtek Jungle SDK Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 189 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2021-12-24 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
Zoho — Zoho Desktop Central Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 190 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2021-12-10
- CISA deadline
- 2021-12-24 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
Hikvision — Hikvision Improper Input Validation
EVRS 87 Immediate
Rank 191 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-01-24 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Hikvision
- Source
- CISA KEV
Teclib — Teclib GLPI Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 192 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.9% 99.96th percentile
- In CISA KEV since
- 2023-03-07
- CISA deadline
- 2023-03-28 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Teclib
- Source
- CISA KEV
Cacti — Cacti Command Injection Vulnerability
EVRS 87 Immediate
Rank 193 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2023-02-16
- CISA deadline
- 2023-03-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cacti
- Source
- CISA KEV
Zoho — Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 194 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2021-12-01
- CISA deadline
- 2021-12-15 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zoho
- Source
- CISA KEV
OSGeo — OSGeo GeoServer GeoTools Eval Injection Vulnerability
EVRS 87 Immediate
Rank 195 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2024-07-15
- CISA deadline
- 2024-08-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- OSGeo
- Source
- CISA KEV
Adobe — Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
EVRS 87 Immediate
Rank 196 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-04-13
- CISA deadline
- 2022-05-04 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
Sophos — Sophos Firewall Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 197 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Apache — Apache Airflow's Experimental API Authentication Bypass
EVRS 87 Immediate
Rank 198 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.96th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 199 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
vBulletin — vBulletin PHP Module Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 200 of 2,960 tracked · as of 22 Oct 16:44 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- vBulletin
- Source
- CISA KEV
