Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,963 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 251 | CVE-2020-13927Apache — Apache Airflow's Experimental API Authentication BypassExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.8% · 99.95th | 2022-01-18 | 2022-07-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.998. | |||||||
| 252 | CVE-2020-15505Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 253 | CVE-2019-16759vBulletin — vBulletin PHP Module Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.7% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 254 | CVE-2021-22054Omnissa — Omnissa Workspace ONE Server-Side Request ForgeryCISA federal deadline · Overdue by 7 months | 87 | 7.5 | 99.7% · 99.95th | 2026-03-09 | 2026-03-23CISA federal deadline · Overdue by 7 months | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 255 | CVE-2014-6278GNU — GNU Bash OS Command Injection VulnerabilityKEV since 2025 · listed over a year | 87 | 8.8 | 99.7% · 99.95th | 2025-10-02 | 2025-10-23KEV since 2025 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.997. | |||||||
| 256 | CVE-2022-22965VMware — Spring Framework JDK 9+ Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2022-04-04 | 2022-04-25KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 257 | CVE-2024-9465Palo Alto Networks — Palo Alto Networks Expedition SQL Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.2 | 99.6% · 99.95th | 2024-11-14 | 2024-12-05KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 258 | CVE-2023-20198Cisco — Cisco IOS XE Web UI Privilege Escalation VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 10.0 | 99.6% · 99.95th | 2023-10-16 | 2023-10-20KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 259 | CVE-2021-33045Dahua — Dahua IP Camera Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 260 | CVE-2020-16846SaltStack — SaltStack Salt Shell Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.6% · 99.95th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.996. | |||||||
| 261 | CVE-2024-4040CrushFTP — CrushFTP VFS Sandbox Escape VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 10.0 | 99.5% · 99.94th | 2024-04-24 | 2024-05-01KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
| 262 | CVE-2018-20062ThinkPHP — ThinkPHP "noneCms" Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.5% · 99.94th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
| 263 | CVE-2018-0171Cisco — Cisco IOS and IOS XE Software Smart Install Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.5% · 99.94th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.995. | |||||||
| 264 | CVE-2024-38856Apache — Apache OFBiz Incorrect Authorization VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.4% · 99.94th | 2024-08-27 | 2024-09-17KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 265 | CVE-2022-0543Redis — Debian-specific Redis Server Lua Sandbox Escape VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 10.0 | 99.4% · 99.94th | 2022-03-28 | 2022-04-18KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.994. | |||||||
| 266 | CVE-2014-6287Rejetto — Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.3% · 99.94th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.993. | |||||||
| 267 | CVE-2023-28771Zyxel — Zyxel Multiple Firewalls OS Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 99.3% · 99.94th | 2023-05-31 | 2023-06-21KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.993. | |||||||
| 268 | CVE-2020-1938Apache — Apache Tomcat Improper Privilege Management VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.3% · 99.94th | 2022-03-03 | 2022-03-17KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.993. | |||||||
| 269 | CVE-2020-14750Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 99.2% · 99.94th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.992. | |||||||
| 270 | CVE-2023-34048VMware — VMware vCenter Server Out-of-Bounds Write VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.2% · 99.93rd | 2024-01-22 | 2024-02-12KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.992. | |||||||
| 271 | CVE-2024-27348Apache — Apache HugeGraph-Server Improper Access Control VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 99.2% · 99.93rd | 2024-09-18 | 2024-10-09KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.992. | |||||||
| 272 | CVE-2022-24086Adobe — Adobe Commerce and Magento Open Source Improper Input Validation VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.2% · 99.93rd | 2022-02-15 | 2022-03-01KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.992. | |||||||
| 273 | CVE-2020-7247OpenBSD — OpenSMTPD Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.0% · 99.93rd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 274 | CVE-2019-3929Crestron — Crestron Multiple Products Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.0% · 99.93rd | 2022-04-15 | 2022-05-06KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
| 275 | CVE-2017-3881Cisco — Cisco IOS and IOS XE Remote Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 99.0% · 99.93rd | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.990. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsApache — Apache Airflow's Experimental API Authentication Bypass
EVRS 87 Immediate
Rank 251 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.8% 99.95th percentile
- In CISA KEV since
- 2022-01-18
- CISA deadline
- 2022-07-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Ivanti — Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 252 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
vBulletin — vBulletin PHP Module Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 253 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- vBulletin
- Source
- CISA KEV
Omnissa — Omnissa Workspace ONE Server-Side Request Forgery
EVRS 87 Immediate
Rank 254 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 7.5 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2026-03-09
- CISA deadline
- 2026-03-23 CISA federal deadline · Overdue by 7 months
- Ransomware use
- Not known
- Vendor
- Omnissa
- Source
- CISA KEV
GNU — GNU Bash OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 255 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 8.8 NVD
- EPSS
- 99.7% 99.95th percentile
- In CISA KEV since
- 2025-10-02
- CISA deadline
- 2025-10-23 KEV since 2025 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
VMware — Spring Framework JDK 9+ Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 256 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2022-04-04
- CISA deadline
- 2022-04-25 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Palo Alto Networks — Palo Alto Networks Expedition SQL Injection Vulnerability
EVRS 87 Immediate
Rank 257 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.2 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-11-14
- CISA deadline
- 2024-12-05 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Palo Alto Networks
- Source
- CISA KEV
Cisco — Cisco IOS XE Web UI Privilege Escalation Vulnerability
EVRS 87 Immediate
Rank 258 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2023-10-16
- CISA deadline
- 2023-10-20 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Dahua — Dahua IP Camera Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 259 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dahua
- Source
- CISA KEV
SaltStack — SaltStack Salt Shell Injection Vulnerability
EVRS 87 Immediate
Rank 260 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.6% 99.95th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- SaltStack
- Source
- CISA KEV
CrushFTP — CrushFTP VFS Sandbox Escape Vulnerability
EVRS 87 Immediate
Rank 261 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.5% 99.94th percentile
- In CISA KEV since
- 2024-04-24
- CISA deadline
- 2024-05-01 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- CrushFTP
- Source
- CISA KEV
ThinkPHP — ThinkPHP "noneCms" Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 262 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.5% 99.94th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- ThinkPHP
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 263 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.5% 99.94th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Apache — Apache OFBiz Incorrect Authorization Vulnerability
EVRS 87 Immediate
Rank 264 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2024-08-27
- CISA deadline
- 2024-09-17 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Redis — Debian-specific Redis Server Lua Sandbox Escape Vulnerability
EVRS 87 Immediate
Rank 265 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 10.0 NVD
- EPSS
- 99.4% 99.94th percentile
- In CISA KEV since
- 2022-03-28
- CISA deadline
- 2022-04-18 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Redis
- Source
- CISA KEV
Rejetto — Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 266 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.3% 99.94th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Rejetto
- Source
- CISA KEV
Zyxel — Zyxel Multiple Firewalls OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 267 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.3% 99.94th percentile
- In CISA KEV since
- 2023-05-31
- CISA deadline
- 2023-06-21 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Apache — Apache Tomcat Improper Privilege Management Vulnerability
EVRS 87 Immediate
Rank 268 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.3% 99.94th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-17 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 269 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.2% 99.94th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
VMware — VMware vCenter Server Out-of-Bounds Write Vulnerability
EVRS 87 Immediate
Rank 270 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.2% 99.93rd percentile
- In CISA KEV since
- 2024-01-22
- CISA deadline
- 2024-02-12 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- VMware
- Source
- CISA KEV
Apache — Apache HugeGraph-Server Improper Access Control Vulnerability
EVRS 87 Immediate
Rank 271 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.2% 99.93rd percentile
- In CISA KEV since
- 2024-09-18
- CISA deadline
- 2024-10-09 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 272 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.2% 99.93rd percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-03-01 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
OpenBSD — OpenSMTPD Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 273 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- OpenBSD
- Source
- CISA KEV
Crestron — Crestron Multiple Products Command Injection Vulnerability
EVRS 87 Immediate
Rank 274 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2022-04-15
- CISA deadline
- 2022-05-06 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Crestron
- Source
- CISA KEV
Cisco — Cisco IOS and IOS XE Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 275 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 99.0% 99.93rd percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
