RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVSS 8.6 highKEV added EPSS 94.4%
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 95.1%
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVSS 8.6 highKEV added EPSS 72.1%
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVSS 8.1 highKEV added EPSS 7.2%
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 3.8%
CVE-2025-21590 Junos OS: An local attacker with shell access can execute arbitrary code
CVSS 4.4 mediumKEV added EPSS 1.7%
CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability
CVSS 7.0 highKEV added EPSS 30.4%
CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 2.2%
CVE-2025-24991 Windows NTFS Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 2.0%
CVE-2025-24985 Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 3.9%
CVE-2025-24984 Windows NTFS Information Disclosure Vulnerability
CVSS 4.6 mediumKEV added EPSS 2.0%
CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 1.9%
CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability
CVSS 5.8 mediumKEV added EPSS 55.5%
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 32.3%
CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.8%
CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.0%
CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
CVSS 7.1 highKEV added EPSS 1.6%
CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability
CVSS 8.2 highKEV added EPSS 1.0%
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVSS 9.3 criticalKEV added EPSS 1.6%
CVE-2024-50302 HID: core: zero-initialize the report buffer
CVSS 5.5 mediumKEV added EPSS 0.81%
CVE-2024-4885 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability
CVSS 6.5 mediumKEV added EPSS 54.1%
CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
CVSS 8.6 highKEV added EPSS 92.3%
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVSS 8.4 highKEV added EPSS 22.2%
CVE-2024-49035 Partner.Microsoft.Com Elevation of Privilege Vulnerability
CVSS 8.7 highKEV added EPSS 1.3%
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 9.0 criticalKEV added EPSS 77.3%
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVSS 8.8 highKEV added EPSS 3.9%
CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVE-2025-24989 Microsoft Power Pages Elevation of Privilege Vulnerability
CVSS 8.2 highKEV added EPSS 1.6%
CVE-2025-23209 Potential RCE with a compromised security key in craft/cms
CVSS 8.1 highKEV added EPSS 21.6%
CVE-2025-0111 PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
CVSS 6.5 mediumKEV added EPSS 2.0%
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface
CVSS 9.1 criticalKEV added EPSS 98.1%
CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 95.3%
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 96.8%
CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability
CVSS 6.1 mediumKEV added EPSS 4.5%
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 41.6%
CVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.1%
CVE-2025-21391 Windows Storage Elevation of Privilege Vulnerability
CVSS 7.1 highKEV added EPSS 2.3%
CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 22.9%
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 20.7%
CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability
CVSS 8.8 highKEV added EPSS 31.1%
CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability
CVSS 7.0 highKEV added EPSS 67.1%
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.7%
CVE-2022-23748 Dante Discovery Process Control Vulnerability
CVSS 7.8 highKEV added EPSS 8.3%
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.7%
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 10.7%
CVE-2024-53104 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
CVSS 7.8 highKEV added EPSS 3.4%
CVE-2024-45195 Apache OFBiz: Confused controller-view authorization logic (forced browsing)
CVSS 9.8 criticalKEV added EPSS 100.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)