RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2018-19321 GIGABYTE Multiple Products Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 3.7%
CVE-2018-19320 GIGABYTE Multiple Products Unspecified Vulnerability
CVSS 7.8 highKEV added EPSS 4.6%
CVE-2022-41352 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 95.5%
CVE-2021-3493 Linux Kernel Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 49.2%
CVE-2022-40684 Fortinet Multiple Products Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-41033 Windows COM+ Event System Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2022-41082 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 8.0 highKEV added EPSS 100.0%
CVE-2022-41040 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2022-36804 Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 99.1%Bitbucket
CVE-2022-3075 Google Chromium Mojo Insufficient Data Validation Vulnerability
CVSS 9.6 criticalKEV added EPSS 5.8%
CVE-2022-2856 Google Chromium Intents Insufficient Input Validation Vulnerability
CVSS 6.5 mediumKEV added EPSS 4.6%
CVE-2022-3236 Sophos Firewall Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.9%
CVE-2022-35405 Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-32917 Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 5.6%
CVE-2022-40139 Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability
CVSS 7.2 highKEV added EPSS 3.4%
CVE-2013-6282 Linux Kernel Improper Input Validation Vulnerability
CVSS 8.8 highKEV added EPSS 39.7%
CVE-2013-2597 Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability
CVSS 8.4 highKEV added EPSS 1.5%
CVE-2013-2596 Linux Kernel Integer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 3.2%
CVE-2013-2094 Linux Kernel Privilege Escalation Vulnerability
CVSS 8.4 highKEV added EPSS 47.7%
CVE-2010-2568 Microsoft Windows Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 89.6%
CVE-2022-37969 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 28.5%
CVE-2022-27593 DeadBolt Ransomware
CVSS 10.0 criticalKEV added EPSS 87.9%
CVE-2022-26258 D-Link DIR-820L Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.6%
CVE-2020-9934 Apple iOS, iPadOS, and macOS Input Validation Vulnerability
CVSS 5.5 mediumKEV added EPSS 3.2%
CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
CVE-2018-6530 D-Link Multiple Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 96.7%
CVE-2018-2628 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-13374 Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
CVSS 4.3 mediumKEV added EPSS 38.1%
CVE-2017-5521 NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability
CVSS 8.1 highKEV added EPSS 89.4%
CVE-2011-4723 D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability
CVSS 5.7 mediumKEV added EPSS 3.1%
CVE-2011-1823 Android OS Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 41.4%
CVE-2022-26352 dotCMS Unrestricted Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.2%
CVE-2022-24706 Remote Code Execution Vulnerability in Packaging
CVSS 9.8 criticalKEV added EPSS 92.5%
CVE-2022-24112 apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVSS 9.8 criticalKEV added EPSS 96.1%
CVE-2022-22963 VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2022-2294 WebRTC Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 70.8%
CVE-2021-39226 Snapshot authentication bypass in grafana
CVSS 9.8 criticalKEV added EPSS 99.9%Grafana Cloud
CVE-2021-38406 Delta Electronics DOPSoft 2 Out-of-Bounds Write
CVSS 7.8 highKEV added EPSS 76.4%
CVE-2021-31010 Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability
CVSS 7.5 highKEV added EPSS 3.7%
CVE-2020-36193 PEAR Archive_Tar Improper Link Resolution Vulnerability
CVSS 7.5 highKEV added EPSS 70.6%
CVE-2020-28949 PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
CVSS 7.8 highKEV added EPSS 84.6%
CVE-2022-32894 Apple iOS and macOS Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 3.3%
CVE-2022-32893 Apple iOS and macOS Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 9.9%
CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service (DoS) Vulnerability in URL Filtering
CVSS 8.6 highKEV added EPSS 2.7%
CVE-2022-26923 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 83.5%
CVE-2022-22536 SAP Multiple Products HTTP Request Smuggling Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2022-21971 Windows Runtime Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 53.8%
CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.3%
CVE-2022-37042 Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.1%
CVE-2022-27925 Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability
CVSS 7.2 highKEV added EPSS 98.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)