RewindexCVEs
CVEs
1,766 matching vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2019-16256 SIMalliance Toolbox Browser Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.9%
CVE-2019-15949 Nagios XI Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 77.0%
CVE-2019-15752 Docker Desktop Community Edition Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 48.8%Docker
CVE-2019-1429 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 77.3%
CVE-2019-1367 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 52.4%
CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
CVSS 7.5 highKEV added EPSS 30.0%
CVE-2019-1215 Microsoft Windows Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 19.3%
CVE-2019-1214 Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.1%
CVE-2019-11580 Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.4%
CVE-2019-11539 Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability
CVSS 8.0 highKEV added EPSS 98.5%
CVE-2019-11510 Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability
CVSS 9.9 criticalKEV added EPSS 100.0%
CVE-2019-0863 Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 5.2%
CVE-2019-0859 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 4.2%
CVE-2019-0808 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 53.0%
CVE-2019-0803 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 45.2%
CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 53.2%
CVE-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 65.0%
CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 29.6%
CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-6789 Exim Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.1%
CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.8%
CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 90.3%
CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
CVSS 6.6 mediumKEV added EPSS 28.9%
CVE-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVSS 7.5 highKEV added EPSS 74.0%
CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVSS 7.5 highKEV added EPSS 76.3%
CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.5%
CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 100.0%
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 93.3%
CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 95.1%
CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 99.5%
CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 94.8%
CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
CVSS 9.8 criticalKEV added EPSS 75.1%
CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 88.7%
CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 35.9%
CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability
CVSS 7.8 highKEV added EPSS 45.7%
CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 99.9%
CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 59.6%
CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.5%
CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 93.3%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)