01
Score composition
Significance, by the evidence behind it.
01PHP2Shell
1,726
02Google Brotli
1,705
03Ivanti Connect Secure
1,653
04Citrix NetScaler
1,500
05WordPress
1,478
06Apple Multiple Products
1,316
07Linux kernel
1,290
08Log4j
1,168
09OpenSSH (musl/Alpine)
885
10Veeam Backup and Replication
178
KEVFresh evidenceEPSS bandCVSSExposurePressIn the wildRansomware
02
Exploit odds
Significance against the 30-day chance of exploit.
110Exploit
01PHP2Shell
100%
02Google Brotli
83%
03Ivanti Connect Secure
89%
04Citrix NetScaler
82%
05WordPress
1.2%
06Apple Multiple Products
1.5%
07Linux kernel
16%
08Log4j
100%
09OpenSSH (musl/Alpine)
1.0%
10Veeam Backup and Replication
0.40%
Higher on exploit oddsHigher on significance
03
Media
Significance against the share of coverage.
110Media
01PHP2Shell
56
02Google Brotli
25
03Ivanti Connect Secure
48
04Citrix NetScaler
0
05WordPress
33
06Apple Multiple Products
16
07Linux kernel
25
08Log4j
8
09OpenSSH (musl/Alpine)
55
10Veeam Backup and Replication
28
Higher on mediaHigher on significance
04
Exploit paths
Thirty-day chance of exploit. A dashed line marks entry to KEV.
PHP2Shell100%
Google Brotli83%
Ivanti Connect Secure89%
Citrix NetScaler82%
WordPress1.2%
Apple Multiple Products1.5%
Linux kernel16%
Log4j100%
OpenSSH (musl/Alpine)1.0%
Veeam Backup and Replication0.40%
05
Rank
Rank over time. A dashed line is off the list.
06
Time listed
Days listed, and the highest rank reached.
3 Nov9 NovDaysHigh
01PHP2Shell
7
1
02Google Brotli
3
1
03Ivanti Connect Secure
7
2
04Citrix NetScaler
3
3
05WordPress
7
1
06Apple Multiple Products
3
6
07Linux kernel
7
2
08Log4j
5
4
09OpenSSH (musl/Alpine)
3
5
10Veeam Backup and Replication
6
7
07
Changes
Who entered, and who left.
Entered
- None
Left
- None