RewindexCVEs
CVEs
1,766 matching vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2020-1464 Windows Spoofing Vulnerability
CVSS 7.8 highKEV added EPSS 38.9%
CVE-2020-1380 Scripting Engine Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 24.2%
CVE-2020-1350 Microsoft Windows DNS Server Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 96.7%
CVE-2020-12812 Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
CVSS 7.5 highKEV added EPSS 45.4%
CVE-2020-12271 Sophos SFOS SQL Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 42.4%
CVE-2020-11738 WordPress Snap Creek Duplicator Plugin File Download Vulnerability
CVSS 7.5 highKEV added EPSS 97.8%
CVE-2020-11652 SaltStack Salt Path Traversal Vulnerability
CVSS 6.5 mediumKEV added EPSS 86.2%
CVE-2020-11651 SaltStack Salt Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2020-1147 Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 95.8%
CVE-2020-10987 Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 79.8%
CVE-2020-1054 Win32k Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 53.9%
CVE-2020-1040 Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
CVSS 9.0 criticalKEV added EPSS 7.4%
CVE-2020-10221 rConfig OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 77.1%
CVE-2020-1020 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 65.0%
CVE-2020-10199 Sonatype Nexus Repository Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 99.1%
CVE-2020-10189 Zoho ManageEngine Desktop Central File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2020-10181 Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.9%
CVE-2020-10148 SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands
CVSS 9.8 criticalKEV added EPSS 92.0%
CVE-2020-0986 Microsoft Windows Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 16.4%
CVE-2020-0968 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 30.7%
CVE-2020-0938 Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 68.9%
CVE-2020-0878 Microsoft Browser Memory Corruption Vulnerability
CVSS 4.2 mediumKEV added EPSS 2.7%
CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2020-0683 Microsoft Windows Installer Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 7.6%
CVE-2020-0674 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 86.9%
CVE-2020-0646 Microsoft .NET Framework Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2020-0601 Microsoft Windows CryptoAPI Spoofing Vulnerability
CVSS 8.1 highKEV added EPSS 89.1%
CVE-2020-0069 Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2020-0041 Android Kernel Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 3.2%
CVE-2019-9978 WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 72.9%
CVE-2019-9082 ThinkPHP Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 97.4%
CVE-2019-8394 Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability
CVSS 7.5 highKEV added EPSS 63.3%
CVE-2019-7481 SonicWall SMA100 SQL Injection Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
CVE-2019-6223 Apple iOS and macOS Group Facetime Vulnerability
CVSS 7.5 highKEV added EPSS 2.6%
CVE-2019-5591 Fortinet FortiOS Default Configuration Vulnerability
CVSS 6.5 mediumKEV added EPSS 18.6%
CVE-2019-5544 VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2019-4716 IBM Planning Analytics Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 86.4%
CVE-2019-3398 Atlassian Confluence Server and Data Center Path Traversal Vulnerability
CVSS 8.8 highKEV added EPSS 97.0%Confluence
CVE-2019-3396 Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%Confluence
CVE-2019-2215 Android Kernel Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 72.1%
CVE-2019-20085 TVT NVMS-1000 Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 96.1%
CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-19356 Netis WF2419 Devices Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 28.1%
CVE-2019-18988 TeamViewer Desktop Bypass Remote Login Vulnerability
CVSS 7.0 highKEV added EPSS 4.7%
CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-18187 Trend Micro OfficeScan Directory Traversal Vulnerability
CVSS 8.8 highKEV added EPSS 25.1%
CVE-2019-17558 Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 98.6%
CVE-2019-17026 Mozilla Firefox And Thunderbird Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 46.3%
CVE-2019-16759 vBulletin PHP Module Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2019-1653 Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)