CVEs

Name: Rewindex CVE index
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.

Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.

CVEs per week (filtered), last 52 weeks

Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.

2019-06-04
CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization
CVSS 9.1 criticalKEV added 2022-01-10EPSS 81.7%
2018-01-03
CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-10EPSS 94.1%
2016-01-02
CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVSS 9.8 criticalKEV added 2022-01-10EPSS 97.8%
2021-12-12
CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2021-12-10
CVE-2021-44228 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CVSS 10.0 criticalKEV added 2021-12-10EPSS 100.0%
2021-08-16
CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2020-05-29
CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-12-10EPSS 78.3%
2020-08-13
CVE-2020-17463 Fuel CMS SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 89.7%
2019-03-21
CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 76.6%
2019-12-24
CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability
CVSS 9.9 criticalKEV added 2021-12-10EPSS 84.7%MongoDB Atlas
2017-10-04
CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 90.7%
2021-11-29
CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-01EPSS 93.3%
2021-09-16
CVE-2021-40438 mod_proxy SSRF
CVSS 9.0 criticalKEV added 2021-12-01EPSS 100.0%
2021-09-01
CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-12-01EPSS 99.8%
2018-08-02
CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability
CVSS 9.1 criticalKEV added 2021-12-01EPSS 96.0%
2021-10-22
CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 74.4%
2021-10-07
CVE-2021-42013 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-09-07
CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.0%
2021-09-15
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%Microsoft Azure
2021-10-08
CVE-2021-37973 Google Chromium Portals Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added 2021-11-03EPSS 11.7%
2021-07-22
CVE-2021-35464 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-08-16
CVE-2021-35395 Realtek AP-Router SDK Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 98.1%
2021-07-14
CVE-2021-35211 Serv-U Remote Memory Escape Vulnerability
CVSS 9.0 criticalKEV added 2021-11-03EPSS 91.2%
2021-07-14
CVE-2021-34523 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.0 criticalKEV added 2021-11-03EPSS 100.0%
2021-07-14
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-11-03EPSS 100.0%
2021-05-07
CVE-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 86.5%
2021-10-08
CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added 2021-11-03EPSS 33.2%
2021-07-09
CVE-2021-30116 Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6
CVSS 10.0 criticalKEV added 2021-11-03EPSS 85.7%
2021-09-02
CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
CVSS 9.6 criticalKEV added 2021-11-03EPSS 51.9%
2021-10-15
CVE-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 82.9%
2021-02-16
CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 56.7%
2021-02-16
CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 11.4%
2021-02-16
CVE-2021-27101 Accellion FTA SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 6.0%
2021-03-02
CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-11-03EPSS 100.0%
2021-08-30
CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%Confluence
2021-03-31
CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%
2021-04-23
CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added 2021-11-03EPSS 47.2%
2021-02-08
CVE-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 96.7%
2021-04-23
CVE-2021-22205 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added 2021-11-03EPSS 99.7%GitLab
2021-09-23
CVE-2021-22005 VMware vCenter Server File Upload Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-05-26
CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-02-24
CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%
2021-04-29
CVE-2021-20090 Arcadyan Buffalo Firmware Path Traversal Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-04-09
CVE-2021-20021 SonicWall Email Security Improper Privilege Management Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 88.8%
2021-02-03
CVE-2021-20016 SonicWall SSLVPN SMA100 SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 40.0%
2021-04-02
CVE-2021-1871 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 7.0%
2021-04-02
CVE-2021-1870 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 7.7%
2021-05-06
CVE-2021-1498 Cisco HyperFlex HX Command Injection Vulnerabilities
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-05-06
CVE-2021-1497 Cisco HyperFlex HX Command Injection Vulnerabilities
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%
2020-02-06
CVE-2020-8657 EyesOfNetwork Use of Hard-Coded Credentials Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 91.9%

Markdown JSON