RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2022-35914 Teclib GLPI Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-33891 Apache Spark shell command injection vulnerability via Spark UI
CVSS 8.8 highKEV added EPSS 93.2%
CVE-2022-28810 Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability
CVSS 6.8 mediumKEV added EPSS 71.0%
CVE-2019-8720 WebKitGTK Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 1.6%
CVE-2022-36537 ZK Framework AuUploader Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 95.4%
CVE-2023-23529 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 9.4%
CVE-2022-47986 IBM Aspera Faspex code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 10.7%
CVE-2022-40765 Mitel MiVoice Connect Command Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 10.6%
CVE-2022-46169 Unauthenticated Command Injection
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2023-21823 Windows Graphics Component Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 5.6%
CVE-2023-23376 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.9%
CVE-2023-21715 Microsoft Publisher Security Feature Bypass Vulnerability
CVSS 7.3 highKEV added EPSS 12.0%
CVE-2023-0669 Fortra GoAnywhere MFT License Response Servlet Command Injection
CVSS 7.2 highKEV added EPSS 100.0%
CVE-2022-24990 TerraMaster OS Remote Command Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability
CVSS 7.8 highKEV added EPSS 15.7%
CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 80.1%
CVE-2022-21587 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2017-11357 Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability
CVSS 9.8 criticalKEV added EPSS 77.7%
CVE-2022-47966 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2022-44877 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-21674 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 34.2%
CVE-2022-41080 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 77.3%
CVE-2022-42475 Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
CVSS 9.3 criticalKEV added EPSS 99.5%
CVE-2018-5430 TIBCO JasperReports Server Information Disclosure Vulnerability
CVSS 7.7 highKEV added EPSS 48.1%
CVE-2018-18809 TIBCO JasperReports Library Directory Traversal Vulnerability
CVSS 9.9 criticalKEV added EPSS 79.1%
CVE-2022-26486 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 2.4%
CVE-2022-26485 Mozilla Firefox Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 14.3%
CVE-2022-42856 Apple iOS Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 8.5%
CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 76.3%
CVE-2022-27518 Unauthenticated remote arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 6.9%
CVE-2022-26501 Veeam Backup & Replication Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.1%
CVE-2022-26500 Veeam Backup & Replication Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 5.8%
CVE-2022-4262 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 23.5%
CVE-2022-4135 Google Chromium GPU Heap Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 31.9%
CVE-2021-35587 Oracle Fusion Middleware Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.3%
CVE-2022-41049 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 2.6%
CVE-2022-41128 Windows Scripting Languages Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 24.6%
CVE-2022-41125 Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 3.0%
CVE-2022-41091 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 1.9%
CVE-2022-41073 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.4%
CVE-2021-25370 Samsung Mobile Devices Memory Corruption Vulnerability
CVSS 6.1 mediumKEV added EPSS 0.89%
CVE-2021-25369 Samsung Mobile Devices Improper Access Control Vulnerability
CVSS 6.2 mediumKEV added EPSS 1.1%
CVE-2021-25337 Samsung Mobile Devices Improper Access Control Vulnerability
CVSS 4.4 mediumKEV added EPSS 2.8%
CVE-2022-42827 Apple iOS and iPadOS Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 1.1%
CVE-2022-3723 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 7.9%
CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
CVSS 7.8 highKEV added EPSS 10.0%
CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
CVSS 6.5 mediumKEV added EPSS 28.5%
CVE-2018-19323 GIGABYTE Multiple Products Privilege Escalation Vulnerability
CVSS 9.8 criticalKEV added EPSS 8.4%
CVE-2018-19322 GIGABYTE Multiple Products Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 1.8%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)