RewindexCVEs
CVEs
1,760 matching vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2020-7247 OpenSMTPD Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2020-5410 Directory Traversal with spring-cloud-config-server
CVSS 7.5 highKEV added EPSS 95.6%
CVE-2020-25223 Sophos SG UTM Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.8%
CVE-2020-2506 improper access control vulnerability in Helpdesk
CVSS 7.3 highKEV added EPSS 2.0%
CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication
CVSS 10.0 criticalKEV added EPSS 4.4%
CVE-2020-1956 Apache Kylin OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 97.4%
CVE-2020-1631 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services
CVSS 8.8 highKEV added EPSS 4.9%
CVE-2019-6340 Drupal core - Highly critical - Remote Code Execution
CVSS 8.1 highKEV added EPSS 92.0%
CVE-2019-2616 Oracle BI Publisher Unauthorized Access Vulnerability
CVSS 7.2 highKEV added EPSS 92.2%
CVE-2019-16920 D-Link Multiple Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-15107 Webmin Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 74.5%
CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.0%
CVE-2019-11043 Underflow in PHP-FPM can lead to RCE
CVSS 8.7 highKEV added EPSS 99.7%
CVE-2019-10068 Kentico Xperience Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.1%
CVE-2019-1003030 Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
CVSS 9.9 criticalKEV added EPSS 97.1%
CVE-2019-0903 Microsoft GDI Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 21.7%
CVE-2018-8414 Microsoft Windows Shell Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 72.6%
CVE-2018-8373 Microsoft Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 61.5%
CVE-2018-6961 VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability
CVSS 8.1 highKEV added EPSS 85.3%
CVE-2018-14839 LG N1A1 NAS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.2%
CVE-2018-1273 VMware Tanzu Spring Data Commons Property Binder Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.0%
CVE-2018-11138 Quest KACE System Management Appliance Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.7%
CVE-2018-0147 Cisco Secure Access Control System Java Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 18.2%
CVE-2018-0125 Cisco VPN Routers Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2017-6334 NETGEAR DGN2200 Devices OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 72.6%
CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 73.0%
CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2017-12617 Apache Tomcat Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 100.0%
CVE-2017-12615 Apache Tomcat on Windows Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 99.7%
CVE-2017-0146 Microsoft Windows SMB Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 89.8%
CVE-2016-7892 Adobe Flash Player Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 18.8%
CVE-2016-4171 Adobe Flash Player Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 20.1%
CVE-2016-1555 NETGEAR Multiple WAP Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2016-11021 D-Link DCS-930L Devices OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 69.6%
CVE-2016-10174 NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.3%
CVE-2016-0752 Ruby on Rails Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 95.5%
CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 63.6%
CVE-2015-3035 TP-Link Multiple Archer Devices Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 83.9%
CVE-2015-1427 Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%Elastic Cloud
CVE-2015-1187 D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.9%
CVE-2015-0666 Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 40.4%
CVE-2014-6332 Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 94.9%
CVE-2014-6324 Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 87.3%
CVE-2014-6287 Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2014-3120 Elasticsearch Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 88.6%Elastic Cloud
CVE-2014-0130 Ruby on Rails Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 53.7%
CVE-2013-5223 D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability
CVSS 5.4 mediumKEV added EPSS 50.8%
CVE-2013-4810 HP Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 79.5%
CVE-2013-2251 Apache Struts Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)