RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-29059 .NET Framework Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 98.6%
CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 87.0%
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added EPSS 17.5%
CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.4%
CVE-2020-11023 Potential XSS vulnerability in jQuery
CVSS 6.9 mediumKEV added EPSS 84.9%
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.5%
CVE-2025-21334 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2025-21333 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.1%
CVE-2025-21335 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVSS 9.6 criticalKEV added EPSS 94.3%
CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
CVSS 6.6 mediumKEV added EPSS 32.2%
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 47.7%
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability
CVSS 4.4 mediumKEV added EPSS 38.2%
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.2%
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.6%
CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
CVSS 7.5 highKEV added EPSS 29.1%
CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
CVSS 8.1 highKEV added EPSS 17.6%
CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 87.3%
CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 48.5%
CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 47.6%
CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 37.5%
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 25.2%
CVE-2024-20767 ColdFusion | Improper Access Control (CWE-284)
CVSS 7.4 highKEV added EPSS 98.5%
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.6%
CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 26.2%
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 2.9%
CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
CVSS 7.5 highKEV added EPSS 4.8%
CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 68.1%
CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
CVSS 6.3 mediumKEV added EPSS 22.6%
CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 10.2%
CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVSS 7.5 highKEV added EPSS 1.7%
CVE-2024-38813 Privilege escalation vulnerability
CVSS 7.5 highKEV added EPSS 17.4%
CVE-2024-38812 Heap-overflow vulnerability
CVSS 9.8 criticalKEV added EPSS 54.6%
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
CVSS 7.2 highKEV added EPSS 93.8%
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection
CVSS 10.0 criticalKEV added EPSS 95.4%
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVSS 9.2 criticalKEV added EPSS 99.6%
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVSS 9.9 criticalKEV added EPSS 98.5%
CVE-2024-43093 Android Framework Privilege Escalation Vulnerability
CVSS 7.3 highKEV added EPSS 0.71%
CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 14.2%
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 84.3%
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
CVSS 10.0 criticalKEV added EPSS 97.2%MetabaseMetabase Cloud
CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability
CVSS 5.3 mediumKEV added EPSS 100.0%Jira
CVE-2014-2120 Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability
CVSS 5.4 mediumKEV added EPSS 22.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)