RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2020-8644 PlaySMS Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.7%
CVE-2020-8599 Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 11.9%
CVE-2020-8515 Multiple DrayTek Vigor Routers Web Management Page Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-7961 Liferay Portal Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.1%
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-5847 Unraid Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.8%
CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added EPSS 61.7%
CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability
CVSS 9.0 criticalKEV added EPSS 70.0%
CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 17.3%
CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.0%
CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.4%
CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.9%
CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.2%
CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.7%
CVE-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 57.5%
CVE-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 97.3%
CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 87.5%
CVE-2020-16846 SaltStack Salt Shell Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2020-16017 Google Chrome Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.7%
CVE-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 6.4%
CVE-2020-15999 Google Chrome FreeType Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 63.9%
CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
CVSS 10.0 criticalKEV added EPSS 80.2%
CVE-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 96.7%
CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 42.4%
CVE-2020-11651 SaltStack Salt Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 79.8%
CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVSS 9.0 criticalKEV added EPSS 7.4%
CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.9%
CVE-2020-10148 SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
CVSS 9.8 criticalKEV added EPSS 92.0%
CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 86.4%
CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%Confluence
CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.9%
CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.1%
CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.4%
CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
CVSS 9.9 criticalKEV added EPSS 100.0%
CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)