RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
CVSS 9.8 criticalKEV added EPSS 96.5%
CVE-2023-4966 Unauthenticated sensitive information disclosure
CVSS 9.4 criticalKEV added EPSS 100.0%
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.6%
CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.4%
CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.2%Confluence
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.2%
CVE-2021-3129 Laravel Ignition File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 17.0%
CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.3%
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2022-29303 SolarView Compact Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.0%
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 36.0%
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.3%
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 69.9%
CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
CVSS 9.2 criticalKEV added EPSS 85.7%
CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 28.1%
CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-2868 Remote Code injection in Barracuda Email Security Gateway
CVSS 9.4 criticalKEV added EPSS 86.8%
CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.3%
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.3%
CVE-2021-45046 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.7%
CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2017-7494 Samba Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-47986 IBM Aspera Faspex code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-46169 Unauthenticated Command Injection
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.7%
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
CVSS 9.3 criticalKEV added EPSS 99.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)