RewindexCVEs
CVEs
1,760 matching vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2022-0609 Google Chromium Animation Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 22.4%
CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.5%
CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2021-34484 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 21.8%
CVE-2021-28799 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
CVSS 10.0 criticalKEV added EPSS 78.3%
CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability
CVSS 8.8 highKEV added EPSS 79.6%
CVE-2018-10562 Dasan GPON Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2018-10561 Dasan GPON Routers Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.8%
CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.4%Redis
CVE-2021-38646 Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 8.0%
CVE-2021-34486 Windows Event Tracing Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 9.3%
CVE-2021-26085 Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability
CVSS 5.3 mediumKEV added EPSS 99.9%Confluence
CVE-2021-20028 SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.1%
CVE-2019-7483 SonicWall SMA100 Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 4.0%
CVE-2018-8440 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 18.5%
CVE-2018-8406 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.4%
CVE-2018-8405 Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.4%
CVE-2017-0213 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.3 highKEV added EPSS 84.3%
CVE-2017-0059 Microsoft Internet Explorer Information Disclosure Vulnerability
CVSS 4.3 mediumKEV added EPSS 62.0%
CVE-2017-0037 Microsoft Edge and Internet Explorer Type Confusion Vulnerability
CVSS 8.1 highKEV added EPSS 80.4%
CVE-2016-7201 Microsoft Edge Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 80.0%
CVE-2016-7200 Microsoft Edge Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 82.8%
CVE-2016-0189 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 94.1%
CVE-2016-0151 Microsoft Windows CSRSS Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 62.8%
CVE-2016-0040 Microsoft Windows Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 24.3%
CVE-2015-2426 Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 86.6%
CVE-2015-2419 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 53.0%
CVE-2015-1770 Microsoft Office Uninitialized Memory Use Vulnerability
CVSS 8.8 highKEV added EPSS 35.0%
CVE-2013-3660 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 39.3%
CVE-2013-2729 Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 66.6%
CVE-2013-2551 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 73.9%
CVE-2013-2465 Oracle Java SE Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.8%
CVE-2013-1690 Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability
CVSS 8.8 highKEV added EPSS 69.0%
CVE-2012-5076 Oracle Java SE Sandbox Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.3%
CVE-2012-2539 Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 53.0%
CVE-2012-2034 Adobe Flash Player Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 7.7%
CVE-2012-0518 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 4.7 mediumKEV added EPSS 4.7%
CVE-2011-2005 Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 31.8%
CVE-2010-4398 Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 8.7%
CVE-2022-26318 WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
CVSS 9.8 criticalKEV added EPSS 78.2%
CVE-2022-26143 MiCollab, MiVoice Business Express Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 87.3%
CVE-2022-21999 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 41.0%
CVE-2021-42237 Sitecore XP Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.6%
CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 53.6%
CVE-2020-9377 D-Link DIR-610 Devices Remote Command Execution
CVSS 8.8 highKEV added EPSS 21.9%
CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
CVSS 9.8 criticalKEV added EPSS 100.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)