RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface
CVSS 9.1 criticalKEV added EPSS 98.1%
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 96.8%
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.7%
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.7%
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 10.7%
CVE-2024-45195 Apache OFBiz: Confused controller-view authorization logic (forced browsing)
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added EPSS 17.5%
CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.4%
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.5%
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVSS 9.6 criticalKEV added EPSS 94.3%
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 47.7%
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.2%
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.6%
CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 87.3%
CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 48.5%
CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 47.6%
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.6%
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 68.1%
CVE-2024-38812 Heap-overflow vulnerability
CVSS 9.8 criticalKEV added EPSS 54.6%
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection
CVSS 10.0 criticalKEV added EPSS 95.4%
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVSS 9.2 criticalKEV added EPSS 99.6%
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVSS 9.9 criticalKEV added EPSS 98.5%
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
CVSS 10.0 criticalKEV added EPSS 97.2%MetabaseMetabase Cloud
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover
CVSS 9.3 criticalKEV added EPSS 91.7%
CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 84.4%
CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication
CVSS 9.1 criticalKEV added EPSS 58.8%
CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability
CVSS 9.8 criticalKEV added EPSS 3.8%
CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.4%
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.2%
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVSS 9.1 criticalKEV added EPSS 93.3%
CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.7%
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.5%
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 98.6%
CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.5%
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)