RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-41061 Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 4.4%
CVE-2023-33246 Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function
CVSS 9.8 criticalKEV added EPSS 96.6%
CVE-2023-38831 RARLAB WinRAR Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 99.8%
CVE-2023-32315 Openfire administration console authentication bypass
CVSS 8.6 highKEV added EPSS 100.0%
CVE-2023-38035 Ivanti Sentry Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability
CVSS 7.5 highKEV added EPSS 80.6%
CVE-2023-26359 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 17.0%
CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.3%
CVE-2023-38180 .NET and Visual Studio Denial of Service Vulnerability
CVSS 7.5 highKEV added EPSS 14.1%
CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2023-35081 Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 63.6%
CVE-2023-37580 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 49.1%
CVE-2023-38606 Apple Multiple Products Kernel Unspecified Vulnerability
CVSS 5.5 mediumKEV added EPSS 2.9%
CVE-2023-37450 Apple Multiple Products WebKit Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 19.0%
CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-29298 Adobe ColdFusion Improper Access Control Security feature bypass
CVSS 7.5 highKEV added EPSS 99.8%
CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2023-36884 Windows Search Remote Code Execution Vulnerability
CVSS 7.5 highKEV added EPSS 99.4%
CVE-2022-29303 SolarView Compact Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.0%
CVE-2023-35311 Microsoft Outlook Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 15.5%
CVE-2023-36874 Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 42.6%
CVE-2023-32049 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 4.2%
CVE-2023-32046 Windows MSHTML Platform Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.0%
CVE-2022-31199 Netwrix Auditor Insecure Object Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 36.0%
CVE-2021-29256 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 3.0%
CVE-2021-25489 Samsung Mobile Devices Improper Input Validation Vulnerability
CVSS 3.3 lowKEV added EPSS 0.53%
CVE-2021-25487 Samsung Mobile Devices Out-of-Bounds Read Vulnerability
CVSS 7.3 highKEV added EPSS 0.63%
CVE-2021-25395 Samsung Mobile Devices Race Condition Vulnerability
CVSS 6.4 mediumKEV added EPSS 0.37%
CVE-2021-25394 Samsung Mobile Devices Race Condition Vulnerability
CVSS 6.4 mediumKEV added EPSS 0.40%
CVE-2021-25372 Samsung Mobile Devices Improper Boundary Check Vulnerability
CVSS 6.1 mediumKEV added EPSS 0.80%
CVE-2021-25371 Samsung Mobile Devices Unspecified Vulnerability
CVSS 6.1 mediumKEV added EPSS 0.80%
CVE-2019-20500 D-Link DWL-2600AP Access Point Command Injection Vulnerability
CVSS 7.8 highKEV added EPSS 96.7%
CVE-2019-17621 D-Link DIR-859 Router Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVE-2023-32439 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 24.0%
CVE-2023-32435 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 23.0%
CVE-2023-32434 Apple Multiple Products Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 51.5%
CVE-2023-27992 Zyxel Multiple NAS Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.3%
CVE-2023-20867 VMware Tools Authentication Bypass Vulnerability
CVSS 3.9 lowKEV added EPSS 13.6%
CVE-2023-32409 Apple Multiple Products WebKit Sandbox Escape Vulnerability
CVSS 8.6 highKEV added EPSS 16.5%
CVE-2023-32373 Apple Multiple Products WebKit Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 12.2%
CVE-2023-28204 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
CVSS 6.5 mediumKEV added EPSS 14.3%
CVE-2023-20887 Vmware Aria Operations for Networks Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2021-44026 Roundcube Webmail SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 69.9%
CVE-2020-35730 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 32.9%
CVE-2020-12641 Roundcube Webmail Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.4%
CVE-2016-9079 Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
CVSS 7.5 highKEV added EPSS 87.4%
CVE-2016-0165 Microsoft Win32k Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 13.7%
CVE-2023-27997 Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
CVSS 9.2 criticalKEV added EPSS 85.7%
CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 37.9%
CVE-2023-33010 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)