RewindexCVEs
CVEs
1,758 matching vulnerabilities, 1,758 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability
CVSS 8.8 highKEV added EPSS 24.0%
CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 64.9%
CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability
CVSS 8.1 highKEV added EPSS 13.5%
CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 8.6%
CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 17.6%
CVE-2023-0266 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
CVSS 7.9 highKEV added EPSS 3.7%
CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 46.7%
CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 18.5%
CVE-2022-3038 Google Chromium Network Service Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 24.9%
CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 1.1%
CVE-2021-30900 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 5.2%
CVE-2017-7494 Samba Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 70.7%
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution
CVSS 8.6 highKEV added EPSS 97.3%
CVE-2023-24880 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 4.4 mediumKEV added EPSS 78.0%
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2022-41328 Fortinet FortiOS Path Traversal Vulnerability
CVSS 6.5 mediumKEV added EPSS 10.7%
CVE-2021-39144 XStream is vulnerable to a Remote Command Execution attack
CVSS 8.5 highKEV added EPSS 98.1%
CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 72.8%
CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-33891 Apache Spark shell command injection vulnerability via Spark UI
CVSS 8.8 highKEV added EPSS 93.2%
CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
CVSS 6.8 mediumKEV added EPSS 71.0%
CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 1.6%
CVE-2022-36537 ZK Framework AuUploader Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 95.4%
CVE-2023-23529 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 9.4%
CVE-2022-47986 IBM Aspera Faspex code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 10.7%
CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 10.6%
CVE-2022-46169 Unauthenticated Command Injection
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2023-21823 Windows Graphics Component Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 5.6%
CVE-2023-23376 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.9%
CVE-2023-21715 Microsoft Publisher Security Feature Bypass Vulnerability
CVSS 7.3 highKEV added EPSS 12.0%
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
CVSS 7.2 highKEV added EPSS 100.0%
CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
CVSS 7.8 highKEV added EPSS 15.7%
CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 80.1%
CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.7%
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 34.2%
CVE-2022-41080 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 77.3%
CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
CVSS 9.3 criticalKEV added EPSS 99.5%
CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability
CVSS 7.7 highKEV added EPSS 48.1%
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability
CVSS 9.9 criticalKEV added EPSS 79.1%
CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.4%
CVE-2022-26485 Mozilla Firefox Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 14.3%
CVE-2022-42856 Apple iOS Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 8.5%
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 76.3%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)