RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.7%
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.7%
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 10.7%
CVE-2024-45195 Apache OFBiz: Confused controller-view authorization logic (forced browsing)
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.94%Microsoft Azure
CVE-2025-0851 Path traversal issue in Deep Java Library
CVSS 9.8 criticalEPSS 23.3%Amazon Web Services
CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added EPSS 17.5%
CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.4%
CVE-2024-52975 Fleet Server sensitive information exposure via logs
CVSS 9.0 criticalEPSS 0.27%Elastic Cloud
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.5%
CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVSS 9.8 criticalEPSS 72.5%GitLab
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVSS 9.6 criticalKEV added EPSS 94.3%
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 47.7%
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.2%
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.6%
CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 87.3%
CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 48.5%
CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 47.6%
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-50379 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
CVSS 9.8 criticalEPSS 31.8%Confluence
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.6%
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 68.1%
CVSS 9.1 criticalEPSS 5.3%InfluxData (InfluxDB Cloud)
CVE-2024-38812 Heap-overflow vulnerability
CVSS 9.8 criticalKEV added EPSS 54.6%
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection
CVSS 10.0 criticalKEV added EPSS 95.4%
CVE-2024-37285 Kibana arbitrary code execution via YAML deserialization
CVSS 9.1 criticalEPSS 1.2%Elastic Cloud
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVSS 9.2 criticalKEV added EPSS 99.6%
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVSS 9.9 criticalKEV added EPSS 98.5%
CVE-2024-43602 Azure CycleCloud Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 2.3%Microsoft Azure
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
CVSS 10.0 criticalKEV added EPSS 97.2%MetabaseMetabase Cloud
CVE-2024-5910 Expedition: Missing Authentication Leads to Admin Account Takeover
CVSS 9.3 criticalKEV added EPSS 91.7%
CVE-2024-51567 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 84.4%
CVE-2019-16278 Nostromo nhttpd Directory Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2024-8956 PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication
CVSS 9.1 criticalKEV added EPSS 58.8%
CVE-2024-47575 Fortinet FortiManager Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability
CVSS 9.8 criticalKEV added EPSS 3.8%
CVE-2024-40711 Veeam Backup and Replication Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.4%
CVE-2024-9680 Mozilla Firefox Use-After-Free Vulnerability
CVSS 9.8 criticalKEV added EPSS 23.2%
CVE-2024-28987 SolarWinds Web Help Desk Hardcoded Credential Vulnerability
CVSS 9.1 criticalKEV added EPSS 93.3%
CVE-2024-23113 Fortinet Multiple Products Format String Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.7%
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)