CVEs

Name: Rewindex CVE index
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

1,764 matching vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.

Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.

CVEs per week (filtered), last 52 weeks

Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.

2020-03-12
CVE-2020-0796 Microsoft SMBv3 Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added 2022-02-10EPSS 99.8%
2018-12-10
CVE-2018-1000861 Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added 2022-02-10EPSS 98.3%
2017-07-10
CVE-2017-9791 Apache Struts 1 Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2022-02-10EPSS 98.9%
2017-06-15
CVE-2017-8464 Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added 2022-02-10EPSS 90.0%
2017-10-19
CVE-2017-10271 Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
CVSS 7.5 highKEV added 2022-02-10EPSS 100.0%
2017-05-12
CVE-2017-0263 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added 2022-02-10EPSS 10.0%
2017-05-12
CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8 highKEV added 2022-02-10EPSS 81.0%
2017-03-17
CVE-2017-0145 Microsoft SMBv1 Remote Code Execution Vulnerability
CVSS 8.8 highKEV added 2022-02-10EPSS 89.9%
2017-03-17
CVE-2017-0144 Microsoft SMBv1 Remote Code Execution Vulnerability
CVSS 8.8 highKEV added 2022-02-10EPSS 99.2%
2016-06-01
CVE-2016-3088 Apache ActiveMQ Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2022-02-10EPSS 98.5%
2015-02-23
CVE-2015-2051 D-Link DIR-645 Router Remote Code Execution Vulnerability
CVSS 8.8 highKEV added 2022-02-10EPSS 97.1%
2015-04-14
CVE-2015-1635 Microsoft HTTP.sys Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-02-10EPSS 100.0%
2015-04-10
CVE-2015-1130 Apple OS X Authentication Bypass Vulnerability
CVSS 7.8 highKEV added 2022-02-10EPSS 9.9%
2014-09-18
CVE-2014-4404 Apple OS X Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added 2022-02-10EPSS 48.9%
2022-01-11
CVE-2022-21882 Win32k Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added 2022-02-04EPSS 59.2%
2021-12-08
CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 99.9%
2020-03-23
CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 84.3%
2020-03-12
CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
CVSS 7.8 highKEV added 2022-01-28EPSS 42.5%
2017-05-02
CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 92.2%
2014-09-25
CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 99.9%
2014-09-24
CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 100.0%
2014-04-27
CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 82.7%
2022-01-07
CVE-2021-35247 Improper Input Validation Vulnerability in Serv-U
CVSS 4.3 mediumKEV added 2022-01-21EPSS 3.5%
2018-10-10
CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added 2022-01-21EPSS 70.0%
2012-01-08
CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2022-01-21EPSS 75.6%
2006-03-30
CVE-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability
CVSS 7.5 highKEV added 2022-01-21EPSS 54.6%
2021-09-13
CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File
CVSS 9.8 criticalKEV added 2022-01-18EPSS 93.0%
2021-07-14
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
CVSS 7.3 highKEV added 2022-01-18EPSS 98.2%
2021-08-26
CVE-2021-32648 Account Takeover in Octobercms
CVSS 8.2 highKEV added 2022-01-18EPSS 90.4%
2021-02-15
CVE-2021-25298 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 73.6%
2021-02-15
CVE-2021-25297 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 56.7%
2021-02-15
CVE-2021-25296 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 71.9%
2021-03-31
CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow
CVSS 9.8 criticalKEV added 2022-01-18EPSS 62.4%
2021-03-31
CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API
CVSS 9.8 criticalKEV added 2022-01-18EPSS 78.0%
2021-02-16
CVE-2021-21315 Command Injection Vulnerability
CVSS 7.1 highKEV added 2022-01-18EPSS 90.7%
2020-10-21
CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal
CVSS 7.5 highKEV added 2022-01-18EPSS 97.2%
2020-11-10
CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass
CVSS 9.8 criticalKEV added 2022-01-18EPSS 99.8%
2020-11-20
CVE-2020-13671 Drupal core Un-restricted Upload of File
CVSS 8.8 highKEV added 2022-01-18EPSS 36.2%
2020-07-16
CVE-2020-11978 Apache Airflow Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 99.2%
2021-09-22
CVE-2021-36260 Hikvision Improper Input Validation
CVSS 9.8 criticalKEV added 2022-01-10EPSS 99.9%
2021-12-08
CVE-2021-27860 Arbitrary file upload vulnerability in FatPipe software
CVSS 9.8 criticalKEV added 2022-01-10EPSS 39.7%
2021-09-23
CVE-2021-22017 VMware vCenter Server Improper Access Control
CVSS 5.3 mediumKEV added 2022-01-10EPSS 49.2%
2021-01-14
CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability
CVSS 8.8 highKEV added 2022-01-10EPSS 10.6%
2019-05-29
CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS 9.8 criticalKEV added 2022-01-10EPSS 100.0%
2019-03-25
CVE-2019-7609 Kibana Arbitrary Code Execution
CVSS 9.8 criticalKEV added 2022-01-10EPSS 95.3%Elastic Cloud
2019-04-26
CVE-2019-2725 Oracle WebLogic Server, Injection
CVSS 7.5 highKEV added 2022-01-10EPSS 100.0%
2019-07-19
CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 8.1 highKEV added 2022-01-10EPSS 44.2%
2019-12-10
CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added 2022-01-10EPSS 74.4%
2019-06-05
CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation
CVSS 9.0 criticalKEV added 2022-01-10EPSS 100.0%
2019-05-29
CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write
CVSS 4.3 mediumKEV added 2022-01-10EPSS 32.5%

Markdown JSON