RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability
CVSS 9.9 criticalKEV added EPSS 79.1%
CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.4%
CVE-2022-27518 Unauthenticated remote arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 6.9%
CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.1%
CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 31.9%
CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.4%
CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.5%
CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.8%
CVE-2022-3236 Sophos Firewall Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-27593 DeadBolt Ransomware
CVSS 10.0 criticalKEV added EPSS 87.9%
CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.2%
CVE-2022-24706 Remote Code Execution Vulnerability in Packaging
CVSS 9.8 criticalKEV added EPSS 92.5%
CVE-2022-24112 apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVSS 9.8 criticalKEV added EPSS 96.1%
CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2021-39226 Snapshot authentication bypass in grafana
CVSS 9.8 criticalKEV added EPSS 99.9%Grafana Cloud
CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.9%
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.9%
CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.2%Confluence
CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 36.9%
CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 71.5%
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.7%
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.7%
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.4%
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.1%
CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 45.7%
CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%Confluence
CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.0%
CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.8%
CVE-2010-0840 Oracle JRE Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.4%
CVE-2017-18362 Kaseya VSA SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.8%
CVE-2019-11708 Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
CVSS 10.0 criticalKEV added EPSS 55.9%
CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.3%
CVE-2022-1388 F5 BIG-IP Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability
CVSS 9.9 criticalKEV added EPSS 74.4%
CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.1%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)