CVEs

Name: Rewindex CVE index
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.

Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.

CVEs per week (filtered), last 52 weeks

Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.

2021-03-31
CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow
CVSS 9.8 criticalKEV added 2022-01-18EPSS 62.4%
2021-03-31
CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API
CVSS 9.8 criticalKEV added 2022-01-18EPSS 78.0%
2020-11-10
CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass
CVSS 9.8 criticalKEV added 2022-01-18EPSS 99.8%
2021-09-22
CVE-2021-36260 Hikvision Improper Input Validation
CVSS 9.8 criticalKEV added 2022-01-10EPSS 99.9%
2021-12-08
CVE-2021-27860 Arbitrary file upload vulnerability in FatPipe software
CVSS 9.8 criticalKEV added 2022-01-10EPSS 39.7%
2019-05-29
CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS 9.8 criticalKEV added 2022-01-10EPSS 100.0%
2019-03-25
CVE-2019-7609 Kibana Arbitrary Code Execution
CVSS 9.8 criticalKEV added 2022-01-10EPSS 95.3%Elastic Cloud
2019-06-05
CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation
CVSS 9.0 criticalKEV added 2022-01-10EPSS 100.0%
2019-06-04
CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization
CVSS 9.1 criticalKEV added 2022-01-10EPSS 81.7%
2018-01-03
CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-10EPSS 94.1%
2016-01-02
CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVSS 9.8 criticalKEV added 2022-01-10EPSS 97.8%
2021-12-12
CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2021-12-10
CVE-2021-44228 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CVSS 10.0 criticalKEV added 2021-12-10EPSS 100.0%
2021-08-16
CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2020-05-29
CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-12-10EPSS 78.3%
2020-08-13
CVE-2020-17463 Fuel CMS SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 89.7%
2019-03-21
CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 76.6%
2019-12-24
CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability
CVSS 9.9 criticalKEV added 2021-12-10EPSS 84.7%MongoDB Atlas
2017-10-04
CVE-2017-12149 Red Hat JBoss Application Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 90.7%
2021-11-29
CVE-2021-44077 Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-01EPSS 93.3%
2021-09-16
CVE-2021-40438 mod_proxy SSRF
CVSS 9.0 criticalKEV added 2021-12-01EPSS 100.0%
2021-09-01
CVE-2021-37415 Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-12-01EPSS 99.8%
2018-08-02
CVE-2018-14847 MikroTik Router OS Directory Traversal Vulnerability
CVSS 9.1 criticalKEV added 2021-12-01EPSS 96.0%
2021-10-22
CVE-2021-42258 BQE BillQuick Web Suite SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 74.3%
2021-10-07
CVE-2021-42013 Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-09-07
CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.0%
2021-09-15
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%Microsoft Azure
2021-10-08
CVE-2021-37973 Google Chromium Portals Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added 2021-11-03EPSS 11.7%
2021-07-22
CVE-2021-35464 ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-08-16
CVE-2021-35395 Realtek AP-Router SDK Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 98.1%
2021-07-14
CVE-2021-35211 Serv-U Remote Memory Escape Vulnerability
CVSS 9.0 criticalKEV added 2021-11-03EPSS 91.2%
2021-07-14
CVE-2021-34523 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.0 criticalKEV added 2021-11-03EPSS 100.0%
2021-07-14
CVE-2021-34473 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-11-03EPSS 100.0%
2021-05-07
CVE-2021-31755 Tenda AC11 Router Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 86.5%
2021-10-08
CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added 2021-11-03EPSS 33.2%
2021-07-09
CVE-2021-30116 Unauthenticated credential leak and business logic flaw in Kaseya VSA <= v9.5.6
CVSS 10.0 criticalKEV added 2021-11-03EPSS 85.7%
2021-09-02
CVE-2021-28550 Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution
CVSS 9.6 criticalKEV added 2021-11-03EPSS 51.9%
2021-10-15
CVE-2021-27561 Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 82.9%
2021-02-16
CVE-2021-27104 Accellion FTA OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 56.7%
2021-02-16
CVE-2021-27103 Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 11.4%
2021-02-16
CVE-2021-27101 Accellion FTA SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 6.0%
2021-03-02
CVE-2021-26855 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-11-03EPSS 100.0%
2021-08-30
CVE-2021-26084 Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%Confluence
2021-03-31
CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%
2021-04-23
CVE-2021-22893 Ivanti Pulse Connect Secure Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added 2021-11-03EPSS 47.2%
2021-02-08
CVE-2021-22502 Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 96.7%
2021-04-23
CVE-2021-22205 GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added 2021-11-03EPSS 99.7%GitLab
2021-09-23
CVE-2021-22005 VMware vCenter Server File Upload Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-05-26
CVE-2021-21985 VMware vCenter Server Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 100.0%
2021-02-24
CVE-2021-21972 VMware vCenter Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-11-03EPSS 99.9%

Markdown JSON