Skip to main content

Priority Feed

Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.

Ranked by EVRS

2,963 match · no filters

All 25 rows on this page are CISA KEV. Rows show only what differs.

Priority Feed, rows 251 to 275
#CVE · title EVRS CVSS EPSS In KEV since CISA deadline Details
251 CVE-2020-13927Apache — Apache Airflow's Experimental API Authentication BypassExigentKEV since 2022 · listed over a year 87 9.8 99.8% · 99.95th 2022-01-18 2022-07-18KEV since 2022 · listed over a year
252 CVE-2020-15505Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.7% · 99.95th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
253 CVE-2019-16759vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.7% · 99.95th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
254 CVE-2021-22054Omnissa — Omnissa Workspace ONE Server-Side Request ForgeryCISA federal deadline · Overdue by 7 months 87 7.5 99.7% · 99.95th 2026-03-09 2026-03-23CISA federal deadline · Overdue by 7 months
255 CVE-2014-6278GNU — GNU Bash OS Command Injection VulnerabilityKEV since 2025 · listed over a year 87 8.8 99.7% · 99.95th 2025-10-02 2025-10-23KEV since 2025 · listed over a year
256 CVE-2022-22965VMware — Spring Framework JDK 9+ Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.6% · 99.95th 2022-04-04 2022-04-25KEV since 2022 · listed over a year
257 CVE-2024-9465Palo Alto Networks — Palo Alto Networks Expedition SQL Injection VulnerabilityExigentKEV since 2024 · listed over a year 87 9.2 99.6% · 99.95th 2024-11-14 2024-12-05KEV since 2024 · listed over a year
258 CVE-2023-20198Cisco — Cisco IOS XE Web UI Privilege Escalation VulnerabilityExigentKEV since 2023 · listed over a year 87 10.0 99.6% · 99.95th 2023-10-16 2023-10-20KEV since 2023 · listed over a year
259 CVE-2021-33045Dahua — Dahua IP Camera Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year 87 9.8 99.6% · 99.95th 2024-08-21 2024-09-11KEV since 2024 · listed over a year
260 CVE-2020-16846SaltStack — SaltStack Salt Shell Injection VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.6% · 99.95th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
261 CVE-2024-4040CrushFTP — CrushFTP VFS Sandbox Escape VulnerabilityExigentKEV since 2024 · listed over a year 87 10.0 99.5% · 99.94th 2024-04-24 2024-05-01KEV since 2024 · listed over a year
262 CVE-2018-20062ThinkPHP — ThinkPHP "noneCms" Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.5% · 99.94th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
263 CVE-2018-0171Cisco — Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.5% · 99.94th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
264 CVE-2024-38856Apache — Apache OFBiz Incorrect Authorization VulnerabilityExigentKEV since 2024 · listed over a year 87 9.8 99.4% · 99.94th 2024-08-27 2024-09-17KEV since 2024 · listed over a year
265 CVE-2022-0543Redis — Debian-specific Redis Server Lua Sandbox Escape VulnerabilityExigentKEV since 2022 · listed over a year 87 10.0 99.4% · 99.94th 2022-03-28 2022-04-18KEV since 2022 · listed over a year
266 CVE-2014-6287Rejetto — Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.3% · 99.94th 2022-03-25 2022-04-15KEV since 2022 · listed over a year
267 CVE-2023-28771Zyxel — Zyxel Multiple Firewalls OS Command Injection VulnerabilityExigentKEV since 2023 · listed over a year 87 9.8 99.3% · 99.94th 2023-05-31 2023-06-21KEV since 2023 · listed over a year
268 CVE-2020-1938Apache — Apache Tomcat Improper Privilege Management VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.3% · 99.94th 2022-03-03 2022-03-17KEV since 2022 · listed over a year
269 CVE-2020-14750Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year 87 9.8 99.2% · 99.94th 2021-11-03 2022-05-03KEV since 2021 · listed over a year
270 CVE-2023-34048VMware — VMware vCenter Server Out-of-Bounds Write VulnerabilityExigentKEV since 2024 · listed over a year 87 9.8 99.2% · 99.93rd 2024-01-22 2024-02-12KEV since 2024 · listed over a year
271 CVE-2024-27348Apache — Apache HugeGraph-Server Improper Access Control VulnerabilityExigentKEV since 2024 · listed over a year 87 9.8 99.2% · 99.93rd 2024-09-18 2024-10-09KEV since 2024 · listed over a year
272 CVE-2022-24086Adobe — Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.2% · 99.93rd 2022-02-15 2022-03-01KEV since 2022 · listed over a year
273 CVE-2020-7247OpenBSD — OpenSMTPD Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.0% · 99.93rd 2022-03-25 2022-04-15KEV since 2022 · listed over a year
274 CVE-2019-3929Crestron — Crestron Multiple Products Command Injection VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.0% · 99.93rd 2022-04-15 2022-05-06KEV since 2022 · listed over a year
275 CVE-2017-3881Cisco — Cisco IOS and IOS XE Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year 87 9.8 99.0% · 99.93rd 2022-03-25 2022-04-15KEV since 2022 · listed over a year
Showing 251–275 of 2,963

Calendar app that needs an address: https://evulnable.com/vulnerability-management/feeds/kev-deadlines.ics