RewindexCVEs
CVEs
1,760 matching vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2019-0703 Microsoft Windows SMB Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 9.4%
CVE-2019-0676 Microsoft Internet Explorer Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 8.1%
CVE-2018-8589 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.0%
CVE-2018-5002 Adobe Flash Player Stack-based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 25.1%
CVE-2022-30525 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-22947 VMware Spring Cloud Gateway Code Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.3%
CVE-2022-1388 F5 BIG-IP Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2021-1789 Apple Multiple Products Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 14.0%
CVE-2019-8506 Apple Multiple Products Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 16.2%
CVE-2014-4113 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 86.6%
CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 85.1%
CVE-2014-0160 OpenSSL Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 100.0%
CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 16.9%
CVE-2022-21919 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 2.4%
CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 92.8%
CVE-2021-41357 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2021-40450 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability
CVSS 9.9 criticalKEV added EPSS 74.4%
CVE-2022-22718 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 18.5%
CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.1%
CVE-2018-6882 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 29.8%
CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 7.1%
CVE-2022-22960 VMware Multiple Products Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 35.5%
CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.5%
CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 72.5%
CVE-2016-4523 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 31.2%
CVE-2014-0780 InduSoft Web Studio Path Traversal
CVSS 9.8 criticalKEV added EPSS 74.7%
CVE-2010-5330 Ubiquiti AirOS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 40.2%
CVE-2007-3010 Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-7602 Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
CVSS 8.1 highKEV added EPSS 99.2%
CVE-2018-20753 Kaseya VSA Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.6%
CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 18.8%
CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 87.0%
CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 99.8%
CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 51.0%
CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 95.3%
CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 85.6%
CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 44.9%
CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 10.8%
CVE-2021-42287 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 7.5 highKEV added EPSS 77.2%
CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 7.5 highKEV added EPSS 73.3%
CVE-2021-39793 Google Pixel Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 0.69%
CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.3%
CVE-2021-22600 Double Free in net/packet/af_packet.c leading to priviledge escalation
CVSS 6.6 mediumKEV added EPSS 6.6%
CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero
CVSS 9.8 criticalKEV added EPSS 34.0%
CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2021-3156 Sudo Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 100.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)