RewindexCVEs
CVEs
1,764 matching vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2020-6820 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
CVSS 8.1 highKEV added EPSS 7.1%
CVE-2020-6819 Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
CVSS 8.1 highKEV added EPSS 3.0%
CVE-2020-6418 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 78.8%
CVE-2020-6287 SAP NetWeaver Missing Authentication for Critical Function Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.1%
CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-5849 Unraid Authentication Bypass Vulnerability
CVSS 7.5 highKEV added EPSS 93.2%
CVE-2020-5847 Unraid Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.8%
CVE-2020-5735 Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 36.2%
CVE-2020-4430 IBM Data Risk Manager Directory Traversal Vulnerability
CVSS 4.3 mediumKEV added EPSS 68.5%
CVE-2020-4428 IBM Data Risk Manager Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added EPSS 61.7%
CVE-2020-4427 IBM Data Risk Manager Security Bypass Vulnerability
CVSS 9.0 criticalKEV added EPSS 70.0%
CVE-2020-4006 Multiple VMware Products Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 17.3%
CVE-2020-3992 VMware ESXi OpenSLP Use-After-Free Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.0%
CVE-2020-3952 VMware vCenter Server Information Disclosure Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.4%
CVE-2020-3950 VMware Multiple Products Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 7.3%
CVE-2020-3569 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerabilities
CVSS 8.6 highKEV added EPSS 3.3%
CVE-2020-3566 Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability
CVSS 8.6 highKEV added EPSS 3.7%
CVE-2020-3161 Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.9%
CVE-2020-3118 Cisco IOS XR Software Cisco Discovery Protocol Format String Vulnerability
CVSS 8.8 highKEV added EPSS 11.7%
CVE-2020-29583 Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.2%
CVE-2020-29557 D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.7%
CVE-2020-27950 Apple Multiple Products Memory Initialization Vulnerability
CVSS 5.5 mediumKEV added EPSS 16.5%
CVE-2020-27932 Apple Multiple Products Type Confusion Vulnerability
CVSS 7.8 highKEV added EPSS 10.3%
CVE-2020-27930 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 22.0%
CVE-2020-26919 Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 57.5%
CVE-2020-2555 Oracle Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2020-25506 D-Link DNS-320 Device Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-25213 WordPress File Manager Plugin Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 97.3%
CVE-2020-24557 Trend Micro Multiple Products Improper Access Control Vulnerability
CVSS 7.8 highKEV added EPSS 2.7%
CVE-2020-17530 Apache Struts Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2020-17496 vBulletin PHP Module Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 87.5%
CVE-2020-17144 Microsoft Exchange Remote Code Execution Vulnerability
CVSS 8.4 highKEV added EPSS 36.5%
CVE-2020-17087 Windows Kernel Local Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 5.4%
CVE-2020-16846 SaltStack Salt Shell Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2020-16017 Google Chrome Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.7%
CVE-2020-16013 Google Chromium V8 Incorrect Implementation Vulnerabililty
CVSS 8.8 highKEV added EPSS 2.8%
CVE-2020-16010 Google Chrome for Android UI Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 6.4%
CVE-2020-16009 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 48.3%
CVE-2020-15999 Google Chrome FreeType Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 63.9%
CVE-2020-15505 Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2020-14883 Oracle WebLogic Server Unspecified Vulnerability
CVSS 7.2 highKEV added EPSS 97.7%
CVE-2020-14882 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-14871 Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
CVSS 10.0 criticalKEV added EPSS 80.2%
CVE-2020-14750 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2020-1472 Netlogon Elevation of Privilege Vulnerability
CVSS 5.5 mediumKEV added EPSS 99.4%
CVE-2020-1464 Windows Spoofing Vulnerability
CVSS 7.8 highKEV added EPSS 38.9%
CVE-2020-1380 Scripting Engine Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 24.2%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)