RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 6.4 mediumEPSS 0.20%Confluence
CVE-2024-49052 Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.70%Microsoft Azure
CVE-2024-10240 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
CVSS 5.3 mediumEPSS 0.56%GitLab
CVE-2024-11828 Inefficient Algorithmic Complexity in GitLab
CVSS 4.3 mediumEPSS 0.61%GitLab
CVE-2024-11669 Incorrect Authorization in GitLab
CVSS 6.5 mediumEPSS 0.51%GitLab
CVE-2024-8114 Missing Authorization in GitLab
CVSS 8.2 highEPSS 0.67%GitLab
CVE-2024-8177 Inefficient Algorithmic Complexity in GitLab
CVSS 5.3 mediumEPSS 0.57%GitLab
CVE-2024-8237 Inefficient Algorithmic Complexity in GitLab
CVSS 6.5 mediumEPSS 0.61%GitLab
CVE-2024-11668 Insufficient Session Expiration in GitLab
CVSS 4.2 mediumEPSS 0.34%GitLab
CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 68.1%
CVE-2024-53253 Sentry's improper error handling leaks Application Integration Client Secret
CVSS 5.3 mediumEPSS 0.65%Sentry
CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
CVSS 6.3 mediumKEV added EPSS 21.9%
CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 9.9%
CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability
CVSS 7.5 highKEV added EPSS 1.7%
CVSS 9.1 criticalEPSS 5.3%InfluxData (InfluxDB Cloud)
CVSS 7.1 highEPSS 0.24%Okta
CVE-2024-38813 Privilege escalation vulnerability
CVSS 7.5 highKEV added EPSS 17.4%
CVE-2024-38812 Heap-overflow vulnerability
CVSS 9.8 criticalKEV added EPSS 54.6%
CVE-2024-45422 Zoom Apps - Improper Input Validation
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2024-45420 Zoom Apps - Uncontrolled Resource Consumption
CVSS 4.3 mediumEPSS 0.49%Zoom
CVE-2024-45419 Zoom Apps - Improper Input Validation
CVSS 8.1 highEPSS 0.53%Zoom
CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface
CVSS 7.2 highKEV added EPSS 93.8%
CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015)
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-11023 Session Hijacking in Firebase JavaScript SDK
CVSS 5.3 mediumEPSS 0.13%Firebase
CVE-2024-1212 LoadMaster Pre-Authenticated OS Command Injection
CVSS 10.0 criticalKEV added EPSS 95.4%
CVSS 7.5 highEPSS 0.40%Flagsmith
CVSS 7.5 highEPSS 0.42%Flagsmith
CVE-2024-49060 Azure Stack HCI Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 0.37%Microsoft Azure
CVE-2024-37285 Kibana arbitrary code execution via YAML deserialization
CVSS 9.1 criticalEPSS 1.2%Elastic Cloud
CVE-2024-9633 Incorrect Ownership Assignment in GitLab
CVSS 3.1 lowEPSS 0.46%GitLab
CVE-2024-7404 Improper Restriction of Rendered UI Layers or Frames in GitLab
CVSS 6.8 mediumEPSS 0.56%GitLab
CVE-2024-9693 Incorrect Authorization in GitLab
CVSS 8.5 highEPSS 0.55%GitLab
CVE-2024-9465 Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure
CVSS 9.1 criticalKEV added EPSS 99.6%
CVE-2024-9463 Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure
CVSS 7.5 highKEV added EPSS 98.5%
CVE-2024-43093 Android Framework Privilege Escalation Vulnerability
CVSS 7.3 highKEV added EPSS 0.71%
CVE-2024-9476 Privilege escalation vulnerability for Organizations in Grafana
CVSS 5.1 mediumEPSS 0.21%Grafana Cloud
CVE-2024-49039 Windows Task Scheduler Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 14.2%
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 84.3%
CVE-2024-43602 Azure CycleCloud Remote Code Execution Vulnerability
CVSS 9.9 criticalEPSS 2.3%Microsoft Azure
CVE-2021-41277 GeoJSON URL validation can expose server files and environment variables to unauthorized users
CVSS 10.0 criticalKEV added EPSS 97.2%MetabaseMetabase Cloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)