RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover
CVSS 9.3 criticalKEV added EPSS 91.7%
CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 84.4%
CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2024-8957 PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration
CVSS 7.2 highKEV added EPSS 79.8%
CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication
CVSS 9.1 criticalKEV added EPSS 58.8%
CVE-2024-37383 RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 74.0%
CVE-2024-20481 Cisco ASA and FTD Denial-of-Service Vulnerability
CVSS 5.8 mediumKEV added EPSS 15.9%
CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-38094 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 50.9%
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability
CVSS 9.8 criticalKEV added EPSS 3.8%
CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.4%
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.2%
CVE-2024-30088 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 68.2%
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVSS 9.1 criticalKEV added EPSS 93.3%
CVE-2024-9380 Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 58.3%
CVE-2024-9379 Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
CVSS 6.5 mediumKEV added EPSS 44.3%
CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.7%
CVE-2024-43572 Microsoft Management Console Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 66.7%
CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 46.1%
CVE-2024-43047 Use After Free in DSP Service
CVSS 7.8 highKEV added EPSS 0.67%
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.5%
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 98.6%
CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.5%
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity
CVSS 8.8 highKEV added EPSS 24.8%
CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity
CVSS 8.8 highKEV added EPSS 99.9%
CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 11.1%
CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability
CVSS 8.8 highKEV added EPSS 10.5%
CVE-2024-6670 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.0%
CVE-2024-43461 Windows MSHTML Platform Spoofing Vulnerability
CVSS 8.8 highKEV added EPSS 54.5%
CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 88.5%
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
CVSS 7.3 highKEV added EPSS 2.7%
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 10.0%
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.3%
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability
CVSS 9.3 criticalKEV added EPSS 18.4%
CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 10.7%
CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability
CVSS 8.4 highKEV added EPSS 97.5%
CVE-2024-7262 Arbitrary Code Execution in WPS Office
CVSS 9.3 criticalKEV added EPSS 3.1%
CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 95.9%
CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 89.7%
CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability
CVSS 8.8 highKEV added EPSS 18.5%
CVE-2024-38856 Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 21.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)