RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-6448 Unitronics VisiLogic uses a default administrative password
CVSS 9.8 criticalKEV added EPSS 2.1%
CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 88.2%
CVE-2023-6345 Google Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 16.5%
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability
CVSS 10.0 criticalKEV added EPSS 77.8%
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.8%
CVE-2023-47246 SysAid Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2023-36845 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
CVSS 9.8 criticalKEV added EPSS 95.1%
CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
CVSS 9.8 criticalKEV added EPSS 96.5%
CVE-2023-4966 Unauthenticated sensitive information disclosure
CVSS 9.4 criticalKEV added EPSS 100.0%
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.6%
CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.4%
CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.2%Confluence
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.2%
CVE-2021-3129 Laravel Ignition File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 17.0%
CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.3%
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2022-29303 SolarView Compact Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.0%
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 36.0%
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.3%
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 69.9%
CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
CVSS 9.2 criticalKEV added EPSS 85.7%
CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 28.1%
CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-2868 Remote Code injection in Barracuda Email Security Gateway
CVSS 9.4 criticalKEV added EPSS 86.8%
CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.3%
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.3%
CVE-2021-45046 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.7%
CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2017-7494 Samba Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)