Highest EPSS
All advisories, highest EPSS probability first. Advisories without a value come last.
-
CVSS severity: High 7.7Known exploited (CISA KEV)
nginx resolver off-by-one (CVE-2021-23017)
A security issue in the nginx resolver allows an off-by-one error. The CISA catalogue sample lists it as an off-by-one in the nginx resolver, and the required action is to apply…
-
React Server Components remote code execution (CVE-2025-55182, React2Shell)
CVE-2025-55182, widely called React2Shell, is a critical remote code execution vulnerability in React Server Components.
-
PHP (CVE-2024-4577)
CVE-2024-4577 is a published vulnerability record for PHP. This draft does not describe the flaw yet.
-
CVSS severity: High 7.5Known exploited (CISA KEV)
HTTP/2 Rapid Reset denial of service (CVE-2023-44487)
HTTP/2 Rapid Reset is a denial of service weakness: an attacker can use the protocol's reset feature to overload a server.
-
Joomla (CVE-2023-23752)
CVE-2023-23752 is a published vulnerability record for Joomla. This draft does not describe the flaw yet.
-
Microsoft Exchange Server (CVE-2021-26855)
CVE-2021-26855 is a published vulnerability record for Exchange Server. This draft does not describe the flaw yet.
-
Apache HTTP Server (CVE-2021-41773)
CVE-2021-41773 is a published vulnerability record for HTTP Server. This draft does not describe the flaw yet.
-
jQuery (CVE-2020-11022)
CVE-2020-11022 is a published vulnerability record for jQuery. This draft does not describe the flaw yet.
-
Drupal (CVE-2018-7600)
CVE-2018-7600 is a published vulnerability record for Drupal. This draft does not describe the flaw yet.
-
OpenSSL (CVE-2014-0160)
CVE-2014-0160 is a published vulnerability record for OpenSSL. This draft does not describe the flaw yet.