RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-33009 Zyxel Multiple Firewalls Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 28.1%
CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-2868 Remote Code injection in Barracuda Email Security Gateway
CVSS 9.4 criticalKEV added EPSS 86.8%
CVE-2023-21492 Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability
CVSS 4.4 mediumKEV added EPSS 2.6%
CVE-2016-6415 Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 87.7%
CVE-2004-1464 Cisco IOS Denial-of-Service Vulnerability
CVSS 5.9 mediumKEV added EPSS 4.8%
CVE-2023-25717 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2021-3560 Red Hat Polkit Incorrect Authorization Vulnerability
CVSS 7.8 highKEV added EPSS 23.7%
CVE-2016-8735 Apache Tomcat Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.3%
CVE-2016-3427 Oracle Java SE and JRockit Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.3%
CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 23.0%
CVE-2014-0196 Linux Kernel Race Condition Vulnerability
CVSS 5.5 mediumKEV added EPSS 20.3%
CVE-2010-3904 Linux Kernel Improper Input Validation Vulnerability
CVSS 7.8 highKEV added EPSS 15.9%
CVE-2023-29336 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 41.2%
CVE-2023-21839 Oracle WebLogic Server Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 99.9%
CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2021-45046 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2023-28432 Minio Information Disclosure in Cluster Deployment
CVSS 7.5 highKEV added EPSS 84.0%
CVE-2023-27350 PaperCut MF/NG Improper Access Control Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-2136 Google Chrome Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.8%
CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 21.4%
CVE-2023-2033 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 40.8%
CVE-2019-8526 Apple macOS Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 0.70%
CVE-2023-29492 Novi Survey Insecure Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2023-20963 Android Framework Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 1.5%
CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 48.9%
CVE-2023-28206 Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability
CVSS 8.6 highKEV added EPSS 23.2%
CVE-2023-28205 Apple Multiple Products WebKit Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 27.1%
CVE-2023-26083 Arm Mali GPU Kernel Driver Information Disclosure Vulnerability
CVSS 3.3 lowKEV added EPSS 1.2%
CVE-2021-27878 Veritas Backup Exec Agent Command Execution Vulnerability
CVSS 8.8 highKEV added EPSS 24.0%
CVE-2021-27877 Veritas Backup Exec Agent Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 64.9%
CVE-2021-27876 Veritas Backup Exec Agent File Access Vulnerability
CVSS 8.1 highKEV added EPSS 13.5%
CVE-2019-1388 Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 8.6%
CVE-2022-27926 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 17.6%
CVE-2023-0266 Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel
CVSS 7.9 highKEV added EPSS 3.7%
CVE-2022-42948 Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.7%
CVE-2022-39197 Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 44.1%
CVE-2022-38181 Arm Mali GPU Kernel Driver Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 18.5%
CVE-2022-3038 Google Chromium Network Service Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 24.9%
CVE-2022-22706 Arm Mali GPU Kernel Driver Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 1.1%
CVE-2021-30900 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 5.2%
CVE-2017-7494 Samba Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2013-3163 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 70.7%
CVE-2023-26360 Adobe ColdFusion Improper Access Control Arbitrary code execution
CVSS 8.6 highKEV added EPSS 97.3%
CVE-2023-24880 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 4.4 mediumKEV added EPSS 78.0%
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2022-41328 Fortinet FortiOS Path Traversal Vulnerability
CVSS 6.5 mediumKEV added EPSS 10.7%
CVE-2021-39144 XStream is vulnerable to a Remote Command Execution attack
CVSS 8.5 highKEV added EPSS 98.1%
CVE-2020-5741 Plex Media Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 72.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)