RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-1671 Sophos Web Appliance Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-2551 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.8%
CVE-2023-36025 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 88.1%
CVE-2023-36033 Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.9%
CVE-2023-36036 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 16.7%
CVE-2023-47246 SysAid Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2023-36851 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
CVSS 5.3 mediumKEV added EPSS 1.1%
CVE-2023-36847 Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
CVSS 5.3 mediumKEV added EPSS 83.5%
CVE-2023-36846 Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
CVSS 5.3 mediumKEV added EPSS 93.5%
CVE-2023-36845 Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
CVSS 9.8 criticalKEV added EPSS 95.1%
CVE-2023-36844 Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
CVSS 5.3 mediumKEV added EPSS 90.0%
CVE-2023-29552 Service Location Protocol (SLP) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 64.0%
CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2023-46748 BIG-IP Configuration utility authenticated SQL injection vulnerability
CVSS 8.8 highKEV added EPSS 4.3%
CVE-2023-46747 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2023-5631 Stored XSS vulnerability in Roundcube
CVSS 6.1 mediumKEV added EPSS 76.3%
CVE-2023-20273 Cisco IOS XE Web UI Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 92.9%
CVE-2023-4966 Unauthenticated sensitive information disclosure
CVSS 9.4 criticalKEV added EPSS 100.0%
CVE-2023-20198 Cisco IOS XE Web UI Privilege Escalation Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.6%
CVE-2023-36563 Microsoft WordPad Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 20.3%
CVE-2023-41763 Skype for Business Elevation of Privilege Vulnerability
CVSS 5.3 mediumKEV added EPSS 90.5%
CVE-2023-44487 HTTP/2 Rapid Reset Attack Vulnerability
CVSS 7.5 highKEV added EPSS 100.0%ConfluenceGitLabJira
CVE-2023-21608 Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 59.4%
CVE-2023-20109 Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
CVSS 6.6 mediumKEV added EPSS 2.5%
CVE-2023-42824 Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.97%
CVE-2023-40044 WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability
CVSS 10.0 criticalKEV added EPSS 90.4%
CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.2%Confluence
CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-28229 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 1.7%
CVE-2023-4211 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations
CVSS 5.5 mediumKEV added EPSS 1.1%
CVE-2023-5217 Google Chromium libvpx Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 49.0%
CVE-2018-14667 Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 74.2%
CVE-2023-41993 Apple Multiple Products WebKit Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 24.3%
CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 9.5%
CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability
CVSS 5.5 mediumKEV added EPSS 13.4%
CVE-2023-41179 Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 4.2%
CVE-2023-28434 MinIO is vulnerable to privilege escalation on Linux/MacOS
CVSS 8.8 highKEV added EPSS 7.9%
CVE-2022-22265 Samsung Mobile Devices Use-After-Free Vulnerability
CVSS 5.0 mediumKEV added EPSS 0.39%
CVE-2021-3129 Laravel Ignition File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2017-6884 Zyxel EMG2926 Routers Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 33.0%
CVE-2014-8361 Realtek SDK Improper Input Validation Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-38205 ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298
CVSS 7.5 highKEV added EPSS 99.8%
CVE-2023-26369 [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild
CVSS 7.8 highKEV added EPSS 6.7%
CVE-2023-4863 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2023-35674 Android Framework Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 2.6%
CVE-2023-20269 Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
CVSS 5.0 mediumKEV added EPSS 26.6%
CVE-2023-36761 Microsoft Word Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 19.6%
CVE-2023-36802 Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 27.9%
CVE-2023-41064 Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 53.4%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)