RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability
CVSS 6.6 mediumKEV added EPSS 4.0%
CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability
CVSS 8.4 highKEV added EPSS 25.2%
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2021-31196 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 54.1%
CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.6%
CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 8.2%
CVE-2024-38107 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2024-38106 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 6.3%
CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 6.5 mediumKEV added EPSS 13.6%
CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 28.7%
CVE-2024-38178 Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 41.4%
CVE-2024-36971 net: fix __dst_negative_advice() race
CVSS 7.8 highKEV added EPSS 2.7%
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
CVSS 9.1 criticalKEV added EPSS 99.9%
CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
CVSS 7.5 highKEV added EPSS 73.0%
CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability
CVSS 6.8 mediumKEV added EPSS 26.8%
CVE-2024-5217 Incomplete Input Validation in GlideExpression Script
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2024-4879 Jelly Template Injection Vulnerability in ServiceNow UI Macros
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability
CVSS 5.3 mediumKEV added EPSS 1.7%Twilio
CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 78.8%
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-28995 SolarWinds Serv-U L Directory Transversal Vulnerability
CVSS 8.6 highKEV added EPSS 99.6%
CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability
CVSS 6.5 mediumKEV added EPSS 13.3%
CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-38112 Windows MSHTML Platform Spoofing Vulnerability
CVSS 7.5 highKEV added EPSS 84.2%
CVE-2024-38080 Windows Hyper-V Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 7.1%
CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability
CVSS 6.0 mediumKEV added EPSS 4.3%
CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability
CVSS 5.3 mediumKEV added EPSS 10.2%
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVSS 6.3 mediumKEV added EPSS 76.6%
CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability
CVSS 8.1 highKEV added EPSS 3.0%
CVE-2024-4358 Registration Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.5%
CVE-2024-26169 Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.0%
CVE-2024-4610 Mali GPU Kernel Driver allows improper GPU memory processing operations
CVSS 7.4 highKEV added EPSS 0.76%
CVE-2024-4577 Argument Injection in PHP-CGI
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability
CVSS 7.4 highKEV added EPSS 96.0%
CVE-2024-24919 Information disclosure
CVSS 8.6 highKEV added EPSS 100.0%
CVE-2024-1086 Use-after-free in Linux kernel's netfilter: nf_tables component
CVSS 7.8 highKEV added EPSS 28.1%
CVE-2024-4978 Malicious Code in Justice AV Solutions (JAVS) Viewer
CVSS 8.4 highKEV added EPSS 26.9%
CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.3 highKEV added EPSS 7.7%
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
CVSS 9.1 criticalKEV added EPSS 97.8%
CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability
CVSS 9.6 criticalKEV added EPSS 15.2%
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 85.4%
CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
CVSS 8.3 highKEV added EPSS 11.0%
CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 86.7%
CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
CVSS 8.0 highKEV added EPSS 43.5%
CVE-2024-30051 Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 5.7%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)