Priority Feed
Every tracked CVE ranked by EVRS, highest first. Older CVEs stay near the top while they are still being exploited.
Ranked by EVRS
2,963 match · no filters| # | CVE · title | EVRS | CVSS | EPSS | In KEV since | CISA deadline | Details |
|---|---|---|---|---|---|---|---|
| 201 | CVE-2010-0188Adobe — Adobe Reader and Acrobat Arbitrary Code Execution VulnerabilityRansomwareKEV since 2022 · listed over a year | 88 | 7.8 | 88.2% · 99.77th | 2022-03-03 | 2022-03-24KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 202 | CVE-2026-104935Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing VulnerabilityCISA federal deadline · Overdue by 9 days | 88 | 8.6 | 86.8% · 99.74th | 2026-10-13 | 2026-10-16CISA federal deadline · Overdue by 9 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.868. | |||||||
| 203 | CVE-2026-88771Citrix — Citrix NetScaler Improper Input Validation VulnerabilityCISA federal deadline · Overdue by 25 days | 88 | 9.5 | 82.2% · 99.65th | 2026-09-27 | 2026-09-30CISA federal deadline · Overdue by 25 days | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.822. | |||||||
| 204 | CVE-2021-28799QNAP — QNAP NAS Improper Authorization VulnerabilityRansomwareExigentKEV since 2022 · listed over a year | 88 | 9.8 | 78.2% · 99.58th | 2022-03-31 | 2022-04-21KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 205 | CVE-2017-11357Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference VulnerabilityRansomwareExigentKEV since 2023 · listed over a year | 88 | 9.8 | 77.7% · 99.56th | 2023-01-26 | 2023-02-16KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 206 | CVE-2024-57726SimpleHelp — SimpleHelp Missing Authorization VulnerabilityRansomwareExigentCISA federal deadline · Overdue by 6 months | 88 | 9.9 | 66.4% · 99.28th | 2026-04-24 | 2026-05-08CISA federal deadline · Overdue by 6 months | |
Why it ranks here: Listed in the CISA KEV catalog, and associated with known ransomware campaigns. | |||||||
| 207 | CVE-2014-6271GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-01-28 | 2022-07-28KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 208 | CVE-2017-9841PHPUnit — PHPUnit Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-02-15 | 2022-08-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 209 | CVE-2021-1498Cisco — Cisco HyperFlex HX Data Platform Command Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 210 | CVE-2023-1671Sophos — Sophos Web Appliance Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2023-11-16 | 2023-12-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 211 | CVE-2024-7593Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-09-24 | 2024-10-15KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 212 | CVE-2012-1823PHP — PHP-CGI Query String Parameter VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 213 | CVE-2013-2251Apache — Apache Struts Improper Input Validation VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 214 | CVE-2020-14882Oracle — Oracle WebLogic Server Remote Code Execution VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 215 | CVE-2019-16920D-Link — D-Link Multiple Routers Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 216 | CVE-2022-44877CWP — CWP Control Web Panel OS Command Injection VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2023-01-17 | 2023-02-07KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 217 | CVE-2024-3273D-Link — D-Link Multiple NAS Devices Command Injection VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-04-11 | 2024-05-02KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 218 | CVE-2024-34102Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2024-07-17 | 2024-08-07KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 219 | CVE-2020-8515DrayTek — Multiple DrayTek Vigor Routers Web Management Page VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.99th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 220 | CVE-2021-33044Dahua — Dahua IP Camera Authentication Bypass VulnerabilityExigentKEV since 2024 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2024-08-21 | 2024-09-11KEV since 2024 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 221 | CVE-2020-9054Zyxel — Zyxel Multiple NAS Devices OS Command Injection VulnerabilityExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-03-25 | 2022-04-15KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 222 | CVE-2019-9670Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity ReferenceExigentKEV since 2022 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2022-01-10 | 2022-07-10KEV since 2022 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 223 | CVE-2021-20090Arcadyan — Arcadyan Buffalo Firmware Path Traversal VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2021-11-17KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 224 | CVE-2014-8361Realtek — Realtek SDK Improper Input Validation VulnerabilityExigentKEV since 2023 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2023-09-18 | 2023-10-09KEV since 2023 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
| 225 | CVE-2020-25506D-Link — D-Link DNS-320 Device Command Injection VulnerabilityExigentKEV since 2021 · listed over a year | 87 | 9.8 | 100.0% · 99.98th | 2021-11-03 | 2022-05-03KEV since 2021 · listed over a year | |
Why it ranks here: Listed in the CISA KEV catalog, and an EPSS probability of 0.999. | |||||||
https://evulnable.com/vulnerability-management/feeds/kev-deadlines.icsAdobe — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
EVRS 88 Immediate
Rank 201 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 7.8 NVD
- EPSS
- 88.2% 99.77th percentile
- In CISA KEV since
- 2022-03-03
- CISA deadline
- 2022-03-24 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- Adobe
- Source
- CISA KEV
Ivanti — Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
EVRS 88 Immediate
Rank 202 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 8.6 NVD
- EPSS
- 86.8% 99.74th percentile
- In CISA KEV since
- 2026-10-13
- CISA deadline
- 2026-10-16 CISA federal deadline · Overdue by 9 days
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
Citrix — Citrix NetScaler Improper Input Validation Vulnerability
EVRS 88 Immediate
Rank 203 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.5 NVD
- EPSS
- 82.2% 99.65th percentile
- In CISA KEV since
- 2026-09-27
- CISA deadline
- 2026-09-30 CISA federal deadline · Overdue by 25 days
- Ransomware use
- Not known
- Vendor
- Citrix
- Source
- CISA KEV
QNAP — QNAP NAS Improper Authorization Vulnerability
EVRS 88 Immediate
Rank 204 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 78.2% 99.58th percentile
- In CISA KEV since
- 2022-03-31
- CISA deadline
- 2022-04-21 KEV since 2022 · listed over a year
- Ransomware use
- Known
- Vendor
- QNAP
- Source
- CISA KEV
Telerik — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
EVRS 88 Immediate
Rank 205 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 77.7% 99.56th percentile
- In CISA KEV since
- 2023-01-26
- CISA deadline
- 2023-02-16 KEV since 2023 · listed over a year
- Ransomware use
- Known
- Vendor
- Telerik
- Source
- CISA KEV
SimpleHelp — SimpleHelp Missing Authorization Vulnerability
EVRS 88 Immediate
Rank 206 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.9 NVD
- EPSS
- 66.4% 99.28th percentile
- In CISA KEV since
- 2026-04-24
- CISA deadline
- 2026-05-08 CISA federal deadline · Overdue by 6 months
- Ransomware use
- Known
- Vendor
- SimpleHelp
- Source
- CISA KEV
GNU — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
EVRS 87 Immediate
Rank 207 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-01-28
- CISA deadline
- 2022-07-28 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- GNU
- Source
- CISA KEV
PHPUnit — PHPUnit Command Injection Vulnerability
EVRS 87 Immediate
Rank 208 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-02-15
- CISA deadline
- 2022-08-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PHPUnit
- Source
- CISA KEV
Cisco — Cisco HyperFlex HX Data Platform Command Injection Vulnerability
EVRS 87 Immediate
Rank 209 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Cisco
- Source
- CISA KEV
Sophos — Sophos Web Appliance Command Injection Vulnerability
EVRS 87 Immediate
Rank 210 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-11-16
- CISA deadline
- 2023-12-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Sophos
- Source
- CISA KEV
Ivanti — Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 211 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-09-24
- CISA deadline
- 2024-10-15 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Ivanti
- Source
- CISA KEV
PHP — PHP-CGI Query String Parameter Vulnerability
EVRS 87 Immediate
Rank 212 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- PHP
- Source
- CISA KEV
Apache — Apache Struts Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 213 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Apache
- Source
- CISA KEV
Oracle — Oracle WebLogic Server Remote Code Execution Vulnerability
EVRS 87 Immediate
Rank 214 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Oracle
- Source
- CISA KEV
D-Link — D-Link Multiple Routers Command Injection Vulnerability
EVRS 87 Immediate
Rank 215 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
CWP — CWP Control Web Panel OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 216 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2023-01-17
- CISA deadline
- 2023-02-07 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- CWP
- Source
- CISA KEV
D-Link — D-Link Multiple NAS Devices Command Injection Vulnerability
EVRS 87 Immediate
Rank 217 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-04-11
- CISA deadline
- 2024-05-02 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
Adobe — Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
EVRS 87 Immediate
Rank 218 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2024-07-17
- CISA deadline
- 2024-08-07 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Adobe
- Source
- CISA KEV
DrayTek — Multiple DrayTek Vigor Routers Web Management Page Vulnerability
EVRS 87 Immediate
Rank 219 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.99th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- DrayTek
- Source
- CISA KEV
Dahua — Dahua IP Camera Authentication Bypass Vulnerability
EVRS 87 Immediate
Rank 220 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2024-08-21
- CISA deadline
- 2024-09-11 KEV since 2024 · listed over a year
- Ransomware use
- Not known
- Vendor
- Dahua
- Source
- CISA KEV
Zyxel — Zyxel Multiple NAS Devices OS Command Injection Vulnerability
EVRS 87 Immediate
Rank 221 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-03-25
- CISA deadline
- 2022-04-15 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Zyxel
- Source
- CISA KEV
Synacor — Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
EVRS 87 Immediate
Rank 222 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2022-01-10
- CISA deadline
- 2022-07-10 KEV since 2022 · listed over a year
- Ransomware use
- Not known
- Vendor
- Synacor
- Source
- CISA KEV
Arcadyan — Arcadyan Buffalo Firmware Path Traversal Vulnerability
EVRS 87 Immediate
Rank 223 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2021-11-17 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- Arcadyan
- Source
- CISA KEV
Realtek — Realtek SDK Improper Input Validation Vulnerability
EVRS 87 Immediate
Rank 224 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2023-09-18
- CISA deadline
- 2023-10-09 KEV since 2023 · listed over a year
- Ransomware use
- Not known
- Vendor
- Realtek
- Source
- CISA KEV
D-Link — D-Link DNS-320 Device Command Injection Vulnerability
EVRS 87 Immediate
Rank 225 of 2,963 tracked · as of 25 Oct 18:37 UTC
- CVSS
- 9.8 NVD
- EPSS
- 100.0% 99.98th percentile
- In CISA KEV since
- 2021-11-03
- CISA deadline
- 2022-05-03 KEV since 2021 · listed over a year
- Ransomware use
- Not known
- Vendor
- D-Link
- Source
- CISA KEV
