RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 3.9%
CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 8.3%
CVE-2023-7028 Weak Password Recovery Mechanism for Forgotten Password in GitLab
CVSS 10.0 criticalKEV added EPSS 94.5%GitLab
CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 45.2%
CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability
CVSS 6.0 mediumKEV added EPSS 18.8%
CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability
CVSS 8.6 highKEV added EPSS 69.8%
CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2022-38028 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 14.9%
CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-3273 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
CVSS 7.3 highKEV added EPSS 100.0%
CVE-2024-3272 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.68%
CVE-2024-29745 Android Pixel Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 0.49%
CVE-2023-24955 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 85.0%
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability
CVSS 9.3 criticalKEV added EPSS 98.4%
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.1%
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 1.5%
CVE-2023-21237 Android Pixel Information Disclosure Vulnerability
CVSS 6.2 mediumKEV added EPSS 0.27%
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2024-21338 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 59.8%
CVE-2023-29360 Microsoft Streaming Service Elevation of Privilege Vulnerability
CVSS 8.4 highKEV added EPSS 21.6%
CVE-2024-1709 Authentication bypass using an alternate path or channel
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 12.7%
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 7.6 highKEV added EPSS 27.8%
CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 63.7%
CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability
CVSS 9.6 criticalKEV added EPSS 84.6%
CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 41.4%
CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
CVSS 8.2 highKEV added EPSS 100.0%
CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.0 highKEV added EPSS 0.49%
CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 10.6%
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
CVSS 8.2 highKEV added EPSS 57.6%
CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 5.5 mediumKEV added EPSS 3.2%
CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
CVSS 8.8 highKEV added EPSS 3.8%
CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability
CVSS 8.1 highKEV added EPSS 76.6%
CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
CVSS 8.2 highKEV added EPSS 100.0%
CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-27524 Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
CVSS 8.9 highKEV added EPSS 98.1%
CVE-2023-23752 [20230201] - Core - Improper access check in webservice endpoints
CVSS 5.3 mediumKEV added EPSS 99.8%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)