RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.5%
CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 72.5%
CVE-2014-0780 InduSoft Web Studio Path Traversal
CVSS 9.8 criticalKEV added EPSS 74.7%
CVE-2010-5330 Ubiquiti AirOS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 40.2%
CVE-2007-3010 Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-20753 Kaseya VSA Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.6%
CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.3%
CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero
CVSS 9.8 criticalKEV added EPSS 34.0%
CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.5%
CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2021-28799 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
CVSS 10.0 criticalKEV added EPSS 78.3%
CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.8%
CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.4%Redis
CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.1%
CVE-2013-2465 Oracle Java SE Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.8%
CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.3%
CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
CVSS 9.8 criticalKEV added EPSS 78.2%
CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 87.3%
CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.6%
CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 53.6%
CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.8%
CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication
CVSS 10.0 criticalKEV added EPSS 4.4%
CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-15107 Webmin Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.9%
CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.1%
CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
CVSS 9.9 criticalKEV added EPSS 97.1%
CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.2%
CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.0%
CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.7%
CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 18.2%
CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 73.0%
CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.3%
CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 63.6%
CVE-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%Elastic Cloud
CVE-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.9%
CVE-2014-6287 Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2013-4810 HP Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 79.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)