RewindexCVEs
CVEs
5,687 vulnerabilities, 1,766 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2014-0322 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 85.1%
CVE-2014-0160 OpenSSL Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 100.0%
CVE-2022-29464 WSO2 Multiple Products Unrestrictive Upload of File Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2022-26904 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 16.9%
CVE-2022-21919 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 2.4%
CVE-2022-0847 Linux Kernel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 92.8%
CVE-2021-41357 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2021-40450 Win32k Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2019-1003029 Jenkins Script Security Plugin Sandbox Bypass Vulnerability
CVSS 9.9 criticalKEV added EPSS 74.4%
CVE-2022-22718 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 18.5%
CVE-2019-3568 WhatsApp VOIP Stack Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.1%
CVE-2018-6882 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 29.8%
CVE-2022-24521 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 7.1%
CVE-2022-22960 VMware Multiple Products Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 35.5%
CVE-2019-3929 Crestron Multiple Products Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2019-16057 D-Link DNS-320 Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 86.5%
CVE-2018-7841 Schneider Electric U.motion Builder SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 72.5%
CVE-2016-4523 Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability
CVSS 7.5 highKEV added EPSS 31.2%
CVE-2014-0780 InduSoft Web Studio Path Traversal
CVSS 9.8 criticalKEV added EPSS 74.7%
CVE-2010-5330 Ubiquiti AirOS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 40.2%
CVE-2007-3010 Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2022-22954 VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-7602 Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
CVSS 8.1 highKEV added EPSS 99.2%
CVE-2018-20753 Kaseya VSA Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.6%
CVE-2015-5123 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 18.8%
CVE-2015-5122 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 87.0%
CVE-2015-3113 Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 99.8%
CVE-2015-2502 Microsoft Internet Explorer Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 51.0%
CVE-2015-0313 Adobe Flash Player Use-After-Free Vulnerability
CVSS 7.8 highKEV added EPSS 95.3%
CVE-2015-0311 Adobe Flash Player Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 85.6%
CVE-2014-9163 Adobe Flash Player Stack-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 44.9%
CVE-2022-23176 WatchGuard Firebox and XTM Privilege Escalation Vulnerability
CVSS 8.8 highKEV added EPSS 10.8%
CVE-2021-42287 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 7.5 highKEV added EPSS 77.2%
CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability
CVSS 7.5 highKEV added EPSS 73.3%
CVE-2021-39793 Google Pixel Out-of-Bounds Write Vulnerability
CVSS 7.8 highKEV added EPSS 0.69%
CVE-2021-27852 Checkbox Survey Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 30.3%
CVE-2021-22600 Double Free in net/packet/af_packet.c leading to priviledge escalation
CVSS 6.6 mediumKEV added EPSS 6.6%
CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero
CVSS 9.8 criticalKEV added EPSS 34.0%
CVE-2017-11317 Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.2%
CVE-2021-3156 Sudo Heap-Based Buffer Overflow Vulnerability
CVSS 7.8 highKEV added EPSS 100.0%
CVE-2021-31166 HTTP Protocol Stack Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2022-0609 Google Chromium Animation Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 22.4%
CVE-2022-22965 Spring Framework JDK 9+ Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-45382 D-Link Multiple Routers Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2022-26871 Trend Micro Apex Central Arbitrary File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.5%
CVE-2022-1040 Sophos Firewall Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2021-34484 Windows User Profile Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 21.8%
CVE-2021-28799 Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
CVSS 10.0 criticalKEV added EPSS 78.3%
CVE-2021-21551 Dell dbutil Driver Insufficient Access Control Vulnerability
CVSS 8.8 highKEV added EPSS 79.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)