RewindexCVEs
CVEs
1,758 matching vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability
CVSS 6.1 mediumKEV added EPSS 0.80%
CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability
CVSS 7.8 highKEV added EPSS 96.7%
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVE-2023-32439 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 24.0%
CVE-2023-32435 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 23.0%
CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 51.5%
CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.3%
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability
CVSS 3.9 lowKEV added EPSS 13.6%
CVE-2023-32409 Apple Multiple Products WebKit Sandbox Escape Vulnerability
CVSS 8.6 highKEV added EPSS 16.5%
CVE-2023-32373 Apple Multiple Products WebKit Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 12.2%
CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
CVSS 6.5 mediumKEV added EPSS 14.3%
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 69.9%
CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 32.9%
CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
CVSS 7.5 highKEV added EPSS 87.4%
CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 13.7%
CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
CVSS 9.2 criticalKEV added EPSS 85.7%
CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 37.9%
CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 28.1%
CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-2868 Remote Code injection in Barracuda Email Security Gateway
CVSS 9.4 criticalKEV added EPSS 86.8%
CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
CVSS 4.4 mediumKEV added EPSS 2.6%
CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 87.7%
CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability
CVSS 5.9 mediumKEV added EPSS 4.8%
CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability
CVSS 7.8 highKEV added EPSS 23.7%
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.3%
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.3%
CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 23.0%
CVE-2014-0196 Linux Kernel Race Condition Vulnerability
CVSS 5.5 mediumKEV added EPSS 20.3%
CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 15.9%
CVE-2023-29336 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 41.2%
CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2021-45046 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2023-28432 Minio Information Disclosure in Cluster Deployment
CVSS 7.5 highKEV added EPSS 84.0%
CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.7%
CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 21.4%
CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 40.8%
CVE-2019-8526 Apple macOS Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 0.70%
CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2023-20963 Android Framework Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.5%
CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 48.9%
CVE-2023-28206 Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
CVSS 8.6 highKEV added EPSS 23.2%
CVE-2023-28205 Apple Multiple Products WebKit Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 27.1%
CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CVSS 3.3 lowKEV added EPSS 1.2%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)