RewindexCVEs
CVEs
5,687 vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2019-0797 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2019-0708 Microsoft Remote Desktop Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2019-0604 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2019-0541 Microsoft MSHTML Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 53.2%
CVE-2019-0211 Apache HTTP Server Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 65.0%
CVE-2018-8653 Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 29.6%
CVE-2018-7600 Drupal Core Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-6789 Exim Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.1%
CVE-2018-4939 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.8%
CVE-2018-4878 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 90.3%
CVE-2018-2380 SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
CVSS 6.6 mediumKEV added EPSS 28.9%
CVE-2018-20062 ThinkPHP "noneCms" Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2018-18325 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVSS 7.5 highKEV added EPSS 74.0%
CVE-2018-15961 Adobe ColdFusion Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2018-15811 DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVSS 7.5 highKEV added EPSS 76.3%
CVE-2018-14558 Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.5%
CVE-2018-13379 Fortinet FortiOS SSL VPN Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2018-11776 Apache Struts Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 100.0%
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 93.3%
CVE-2018-0798 Microsoft Office Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 95.1%
CVE-2018-0296 Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
CVE-2018-0171 Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 99.5%
CVE-2017-9822 DotNetNuke (DNN) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 94.8%
CVE-2017-9805 Apache Struts Deserialization of Untrusted Data Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2017-9248 Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
CVSS 9.8 criticalKEV added EPSS 75.1%
CVE-2017-8759 Microsoft .NET Framework Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 88.7%
CVE-2017-7269 Microsoft Windows Server Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2017-6327 Symantec Messaging Gateway Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 35.9%
CVE-2017-5638 Apache Struts Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2017-16651 Roundcube Webmail File Disclosure Vulnerability
CVSS 7.8 highKEV added EPSS 45.7%
CVE-2017-11882 Microsoft Office Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 99.9%
CVE-2017-11774 Microsoft Office Outlook Security Feature Bypass Vulnerability
CVSS 7.8 highKEV added EPSS 59.6%
CVE-2017-0199 Microsoft Office and WordPad Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.5%
CVE-2017-0143 Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 93.3%
CVE-2016-9563 SAP NetWeaver XML External Entity (XXE) Vulnerability
CVSS 6.5 mediumKEV added EPSS 24.2%
CVE-2016-7255 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 81.0%
CVE-2016-4437 Apache Shiro Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.0%
CVE-2016-3976 SAP NetWeaver Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 47.3%
CVE-2016-3718 ImageMagick Server-Side Request Forgery (SSRF) Vulnerability
CVSS 5.5 mediumKEV added EPSS 75.7%
CVE-2016-3715 ImageMagick Arbitrary File Deletion Vulnerability
CVSS 5.5 mediumKEV added EPSS 75.3%
CVE-2016-3643 SolarWinds Virtualization Manager Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.7%
CVE-2016-3235 Microsoft Office OLE DLL Side Loading Vulnerability
CVSS 7.8 highKEV added EPSS 43.3%
CVE-2016-0185 Microsoft Windows Media Center Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 69.8%
CVE-2016-0167 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 5.7%
CVE-2015-4852 Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.0%
CVE-2015-1641 Microsoft Office Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 97.2%
CVE-2014-1812 Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 65.1%
CVE-2012-3152 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.1 criticalKEV added EPSS 98.8%
CVE-2012-0158 Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2010-5326 SAP NetWeaver Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 17.8%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)