RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.5%
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 98.6%
CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.5%
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2024-6670 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 93.0%
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability
CVSS 9.3 criticalKEV added EPSS 18.4%
CVE-2024-7262 Arbitrary Code Execution in WPS Office
CVSS 9.3 criticalKEV added EPSS 3.1%
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.6%
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
CVSS 9.1 criticalKEV added EPSS 99.9%
CVE-2024-5217 Incomplete Input Validation in GlideExpression Script
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2024-4879 Jelly Template Injection Vulnerability in ServiceNow UI Macros
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-4358 Registration Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.5%
CVE-2024-4577 Argument Injection in PHP-CGI
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
CVSS 9.1 criticalKEV added EPSS 97.8%
CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability
CVSS 9.6 criticalKEV added EPSS 15.2%
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 82.7%
CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 8.3%
CVE-2023-7028 Weak Password Recovery Mechanism for Forgotten Password in GitLab
CVSS 10.0 criticalKEV added EPSS 94.5%GitLab
CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-3272 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability
CVSS 9.3 criticalKEV added EPSS 98.4%
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.1%
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2024-1709 Authentication bypass using an alternate path or channel
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 12.6%
CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability
CVSS 9.6 criticalKEV added EPSS 84.6%
CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)