RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2022-23227 NUUO NVRmini2 Devices Missing Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 48.5%
CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 47.6%
CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 37.5%
CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.8%
CVSS 6.1 mediumEPSS 0.24%Optimizely
CVSS 8.1 highEPSS 0.38%Optimizely
CVSS 4.7 mediumEPSS 0.28%Optimizely
CVE-2024-12539 Elasticsearch Incorrect Authorization
CVSS 6.5 mediumEPSS 0.46%Elastic Cloud
CVE-2024-51479 Authorization bypass in Next.js
CVSS 7.5 highEPSS 4.0%Vercel
CVE-2024-50379 Apache Tomcat: RCE due to TOCTOU issue in JSP compilation
CVSS 9.8 criticalEPSS 31.8%Confluence
CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.0%
CVE-2024-11358 Insecure Android File Provider Paths
CVSS 5.7 mediumEPSS 0.12%Mattermost
CVE-2024-54682 Zipbomb DoS via Missing Slack Import Validation
CVSS 6.5 mediumEPSS 0.44%Mattermost
CVE-2024-54083 DoS via lack of type validation in Calls
CVSS 6.5 mediumEPSS 0.63%Mattermost
CVE-2024-48872 Bypass of "Max failed attempts" restriction via race condition
CVSS 4.8 mediumEPSS 0.26%Mattermost
CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 25.2%
CVE-2024-20767 ColdFusion | Improper Access Control (CWE-284)
CVSS 7.4 highKEV added EPSS 98.5%
CVE-2024-8116 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.47%GitLab
CVE-2024-8650 Incorrect Authorization in GitLab
CVSS 5.3 mediumEPSS 0.48%GitLab
CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability
CVSS 9.8 criticalKEV added EPSS 98.6%
CVE-2024-8233 Inefficient Algorithmic Complexity in GitLab
CVSS 7.5 highEPSS 0.76%GitLab
CVE-2024-9367 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 4.3 mediumEPSS 0.49%GitLab
CVE-2024-9387 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
CVSS 6.4 mediumEPSS 0.38%GitLab
CVE-2024-10043 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.46%GitLab
CVE-2024-11274 URL Redirection to Untrusted Site ('Open Redirect') in GitLab
CVSS 8.7 highEPSS 0.46%GitLab
CVE-2024-12570 Privilege Context Switching Error in GitLab
CVSS 6.7 mediumEPSS 0.45%GitLab
CVE-2024-12292 Insertion of Sensitive Information into Log File in GitLab
CVSS 4.0 mediumEPSS 0.23%GitLab
CVE-2024-53246 Sensitive Information Disclosure through SPL commands
CVSS 5.3 mediumEPSS 0.29%Splunk
CVE-2024-53243 Information Disclosure in Mobile Alert Responses in Splunk Secure Gateway
CVSS 4.3 mediumEPSS 0.29%Splunk
CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 26.2%
CVE-2024-53847 Trix vulnerable to Cross-site Scripting on copy & paste
CVSS 5.1 mediumEPSS 0.46%Basecamp
CVE-2024-12247 Improper propagation of permission scheme updates across cluster nodes
CVSS 4.6 mediumEPSS 0.17%Mattermost
CVE-2024-52269 AI Assistant PDF Document Spoofing in DocuSign
CVSS 8.1 highEPSS 0.28%DocuSign
CVE-2024-52276 PDF Document Spoofing in DocuSign
CVSS 7.5 highEPSS 0.35%DocuSign
CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability
CVSS 10.0 criticalKEV added EPSS 94.7%
CVE-2024-11680 ProjectSend Unauthenticated Configuration Modification
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 2.9%
CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability
CVSS 7.5 highKEV added EPSS 4.8%
CVE-2024-11599 Domain Restriction Bypass on Registration
CVSS 8.2 highEPSS 0.47%Mattermost
CVE-2024-53859 go-gh `auth.TokenForHost` violates GitHub host security boundary within a codespace
CVSS 6.5 mediumEPSS 0.53%GitHub
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)