RewindexCVEs
CVEs
1,760 matching vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVSS 8.1 highKEV added EPSS 89.4%
CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
CVSS 5.7 mediumKEV added EPSS 3.1%
CVE-2011-1823 Android OS Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 41.4%
CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.2%
CVE-2022-24706 Remote Code Execution Vulnerability in Packaging
CVSS 9.8 criticalKEV added EPSS 92.5%
CVE-2022-24112 apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVSS 9.8 criticalKEV added EPSS 96.1%
CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-2294 WebRTC Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 70.8%
CVE-2021-39226 Snapshot authentication bypass in grafana
CVSS 9.8 criticalKEV added EPSS 99.9%Grafana Cloud
CVE-2021-38406 Delta Electronics DOPSoft 2 Out-of-Bounds Write
CVSS 7.8 highKEV added EPSS 76.4%
CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
CVSS 7.5 highKEV added EPSS 3.7%
CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability
CVSS 7.5 highKEV added EPSS 70.6%
CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
CVSS 7.8 highKEV added EPSS 84.6%
CVE-2022-32894 Apple iOS and macOS Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 3.3%
CVE-2022-32893 Apple iOS and macOS Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 9.9%
CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
CVSS 8.6 highKEV added EPSS 2.7%
CVE-2022-26923 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 83.5%
CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2022-21971 Windows Runtime Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 53.8%
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.1%
CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS 7.2 highKEV added EPSS 98.7%
CVE-2022-34713 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 67.8%
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.9%
CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.2%Confluence
CVE-2022-1364 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 13.9%
CVE-2022-1096 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 24.7%
CVE-2022-22047 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 18.8%
CVE-2022-26925 Windows LSA Spoofing Vulnerability
CVSS 8.1 highKEV added EPSS 10.5%
CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2021-4034 Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
CVSS 7.8 highKEV added EPSS 94.9%
CVE-2021-30983 Apple iOS and iPadOS Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 2.9%
CVE-2021-30533 Google Chromium PopupBlocker Security Bypass Vulnerability
CVSS 6.5 mediumKEV added EPSS 16.7%
CVE-2020-9907 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 3.2%
CVE-2020-3837 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 14.8%
CVE-2019-8605 Apple Multiple Products Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 17.6%
CVE-2018-4344 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 2.4%
CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.2%
CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 36.9%
CVE-2016-2388 SAP NetWeaver Information Disclosure Vulnerability
CVSS 5.3 mediumKEV added EPSS 52.2%
CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 71.5%
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.3%
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.7%
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.4%
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.1%
CVE-2019-5825 Google Chromium V8 Out-of-Bounds Write Vulnerability
CVSS 6.5 mediumKEV added EPSS 55.9%
CVE-2019-15271 Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability
CVSS 8.8 highKEV added EPSS 5.5%
CVE-2018-6065 Google Chromium V8 Integer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 60.3%
CVE-2018-4990 Adobe Acrobat and Reader Double Free Vulnerability
CVSS 8.8 highKEV added EPSS 35.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)