RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2022-47986 IBM Aspera Faspex code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-46169 Unauthenticated Command Injection
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.7%
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
CVSS 9.3 criticalKEV added EPSS 99.5%
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability
CVSS 9.9 criticalKEV added EPSS 79.1%
CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.4%
CVE-2022-27518 Unauthenticated remote arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 6.9%
CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.1%
CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 31.9%
CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.4%
CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.5%
CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.8%
CVE-2022-3236 Sophos Firewall Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-27593 DeadBolt Ransomware
CVSS 10.0 criticalKEV added EPSS 87.9%
CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.2%
CVE-2022-24706 Remote Code Execution Vulnerability in Packaging
CVSS 9.8 criticalKEV added EPSS 92.5%
CVE-2022-24112 apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVSS 9.8 criticalKEV added EPSS 96.1%
CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2021-39226 Snapshot authentication bypass in grafana
CVSS 9.8 criticalKEV added EPSS 99.9%Grafana Cloud
CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.9%
CVE-2022-30333 RARLAB UnRAR Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-27924 Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.9%
CVE-2022-26138 Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.2%Confluence
CVE-2022-29499 Mitel MiVoice Connect Data Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.2%
CVE-2021-38163 SAP NetWeaver Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 36.9%
CVE-2016-2386 SAP NetWeaver SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 71.5%
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.7%
CVE-2019-7194 QNAP Photo Station Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.7%
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.4%
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.1%
CVE-2017-6862 NETGEAR Multiple Devices Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 45.7%
CVE-2022-26134 Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%Confluence
CVE-2013-0422 Oracle JRE Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.0%
CVE-2012-1710 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.8%
CVE-2010-0840 Oracle JRE Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2018-19949 QNAP NAS File Station Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.2%
CVE-2017-8543 Microsoft Windows Search Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.4%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)