CVEs

Name: Rewindex CVE index
Creator: Rewindex
License: https://creativecommons.org/licenses/by/4.0/

5,687 vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.

Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.

CVEs per week, last 52 weeks

Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.

2022-01-11
CVE-2022-21882 Win32k Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added 2022-02-04EPSS 59.2%
2021-12-08
CVE-2021-20038 SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 99.9%
2020-03-23
CVE-2020-5722 Grandstream Networks UCM6200 Series SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 84.3%
2020-03-12
CVE-2020-0787 Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
CVSS 7.8 highKEV added 2022-01-28EPSS 42.5%
2017-05-02
CVE-2017-5689 Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 92.2%
2014-09-25
CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 99.9%
2014-09-24
CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 100.0%
2014-04-27
CVE-2014-1776 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 9.8 criticalKEV added 2022-01-28EPSS 82.7%
2022-01-07
CVE-2021-35247 Improper Input Validation Vulnerability in Serv-U
CVSS 4.3 mediumKEV added 2022-01-21EPSS 3.7%
2018-10-10
CVE-2018-8453 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added 2022-01-21EPSS 70.0%
2012-01-08
CVE-2012-0391 Apache Struts 2 Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added 2022-01-21EPSS 75.6%
2006-03-30
CVE-2006-1547 Apache Struts 1 ActionForm Denial-of-Service Vulnerability
CVSS 7.5 highKEV added 2022-01-21EPSS 54.6%
2021-09-13
CVE-2021-40870 Aviatrix Controller Unrestricted Upload of File
CVSS 9.8 criticalKEV added 2022-01-18EPSS 93.0%
2021-07-14
CVE-2021-33766 Microsoft Exchange Server Information Disclosure Vulnerability
CVSS 7.3 highKEV added 2022-01-18EPSS 98.2%
2021-08-26
CVE-2021-32648 Account Takeover in Octobercms
CVSS 8.2 highKEV added 2022-01-18EPSS 91.2%
2021-02-15
CVE-2021-25298 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 73.6%
2021-02-15
CVE-2021-25297 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 56.7%
2021-02-15
CVE-2021-25296 Nagios XI OS Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 71.9%
2021-03-31
CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow
CVSS 9.8 criticalKEV added 2022-01-18EPSS 62.4%
2021-03-31
CVE-2021-21975 VMware Server Side Request Forgery in vRealize Operations Manager API
CVSS 9.8 criticalKEV added 2022-01-18EPSS 78.0%
2021-02-16
CVE-2021-21315 Command Injection Vulnerability
CVSS 7.1 highKEV added 2022-01-18EPSS 90.7%
2020-10-21
CVE-2020-14864 Oracle Business Intelligence Enterprise Edition Path Transversal
CVSS 7.5 highKEV added 2022-01-18EPSS 97.2%
2020-11-10
CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass
CVSS 9.8 criticalKEV added 2022-01-18EPSS 99.8%
2020-11-20
CVE-2020-13671 Drupal core Un-restricted Upload of File
CVSS 8.8 highKEV added 2022-01-18EPSS 36.2%
2020-07-16
CVE-2020-11978 Apache Airflow Command Injection
CVSS 8.8 highKEV added 2022-01-18EPSS 99.2%
2021-09-22
CVE-2021-36260 Hikvision Improper Input Validation
CVSS 9.8 criticalKEV added 2022-01-10EPSS 99.9%
2021-12-08
CVE-2021-27860 Arbitrary file upload vulnerability in FatPipe software
CVSS 9.8 criticalKEV added 2022-01-10EPSS 39.7%
2021-09-23
CVE-2021-22017 VMware vCenter Server Improper Access Control
CVSS 5.3 mediumKEV added 2022-01-10EPSS 49.2%
2021-01-14
CVE-2020-6572 Google Chrome Media Use-After-Free Vulnerability
CVSS 8.8 highKEV added 2022-01-10EPSS 10.6%
2019-05-29
CVE-2019-9670 Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference
CVSS 9.8 criticalKEV added 2022-01-10EPSS 100.0%
2019-03-25
CVE-2019-7609 Kibana Arbitrary Code Execution
CVSS 9.8 criticalKEV added 2022-01-10EPSS 95.3%Elastic Cloud
2019-04-26
CVE-2019-2725 Oracle WebLogic Server, Injection
CVSS 7.5 highKEV added 2022-01-10EPSS 100.0%
2019-07-19
CVE-2019-1579 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 8.1 highKEV added 2022-01-10EPSS 44.2%
2019-12-10
CVE-2019-1458 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added 2022-01-10EPSS 74.4%
2019-06-05
CVE-2019-10149 Exim Mail Transfer Agent (MTA) Improper Input Validation
CVSS 9.0 criticalKEV added 2022-01-10EPSS 100.0%
2019-05-29
CVE-2018-13383 Fortinet FortiOS and FortiProxy Out-of-bounds Write
CVSS 4.3 mediumKEV added 2022-01-10EPSS 32.5%
2019-06-04
CVE-2018-13382 Fortinet FortiOS and FortiProxy Improper Authorization
CVSS 9.1 criticalKEV added 2022-01-10EPSS 81.7%
2018-01-03
CVE-2017-1000486 Primetek Primefaces Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2022-01-10EPSS 94.1%
2016-01-02
CVE-2015-7450 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVSS 9.8 criticalKEV added 2022-01-10EPSS 97.8%
2013-12-11
CVE-2013-3900 WinVerifyTrust Signature Validation Vulnerability
CVSS 5.5 mediumKEV added 2022-01-10EPSS 44.6%
2022-01-04
CVE-2021-44168 Fortinet FortiOS Arbitrary File Download
CVSS 3.3 lowKEV added 2021-12-10EPSS 0.91%
2021-12-15
CVE-2021-43890 Windows AppX Installer Spoofing Vulnerability
CVSS 7.1 highKEV added 2021-12-15EPSS 11.3%
2021-12-12
CVE-2021-44515 Zoho Desktop Central Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2021-12-10
CVE-2021-44228 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
CVSS 10.0 criticalKEV added 2021-12-10EPSS 100.0%
2021-08-16
CVE-2021-35394 Realtek Jungle SDK Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 99.9%
2020-05-29
CVE-2020-8816 Pi-Hole AdminLTE Remote Code Execution Vulnerability
CVSS 9.1 criticalKEV added 2021-12-10EPSS 78.3%
2020-08-13
CVE-2020-17463 Fuel CMS SQL Injection Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 89.7%
2019-03-21
CVE-2019-7238 Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability
CVSS 9.8 criticalKEV added 2021-12-10EPSS 76.6%
2019-07-17
CVE-2019-13272 Linux Kernel Improper Privilege Management Vulnerability
CVSS 7.8 highKEV added 2021-12-10EPSS 52.2%
2019-12-24
CVE-2019-10758 MongoDB mongo-express Remote Code Execution Vulnerability
CVSS 9.9 criticalKEV added 2021-12-10EPSS 84.7%MongoDB Atlas

Markdown JSON