RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-43573 Windows MSHTML Platform Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 46.1%
CVE-2024-43047 Use After Free in DSP Service
CVSS 7.8 highKEV added EPSS 0.67%
CVE-2024-45519 Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVE-2023-25280 D-Link DIR-820 Router OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2020-15415 DrayTek Multiple Vigor Routers OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.5%
CVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 7.5%
CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 98.6%
CVE-2024-27348 Apache HugeGraph-Server: Command execution in gremlin
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2022-21445 Oracle ADF Faces Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 62.5%
CVE-2020-14644 Oracle WebLogic Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.5%
CVE-2020-0618 Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.0%
CVE-2014-0502 Adobe Flash Player Double Free Vulnerablity
CVSS 8.8 highKEV added EPSS 24.8%
CVE-2014-0497 Adobe Flash Player Integer Underflow Vulnerablity
CVSS 8.8 highKEV added EPSS 99.9%
CVE-2013-0648 Adobe Flash Player Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 11.1%
CVE-2013-0643 Adobe Flash Player Incorrect Default Permissions Vulnerability
CVSS 8.8 highKEV added EPSS 10.5%
CVE-2024-6670 WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.9%
CVE-2024-43461 Windows MSHTML Platform Spoofing Vulnerability
CVSS 8.8 highKEV added EPSS 54.5%
CVE-2024-8190 Ivanti Cloud Services Appliance OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 88.5%
CVE-2024-38226 Microsoft Publisher Security Feature Bypass Vulnerability
CVSS 7.3 highKEV added EPSS 2.7%
CVE-2024-38217 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 10.0%
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.3%
CVE-2024-40766 SonicWall SonicOS Improper Access Control Vulnerability
CVSS 9.3 criticalKEV added EPSS 18.4%
CVE-2017-1000253 Linux Kernel PIE Stack Buffer Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 10.7%
CVE-2016-3714 ImageMagick Improper Input Validation Vulnerability
CVSS 8.4 highKEV added EPSS 97.5%
CVE-2024-7262 Arbitrary Code Execution in WPS Office
CVSS 7.8 highKEV added EPSS 3.1%
CVE-2021-20124 Draytek VigorConnect Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 95.9%
CVE-2021-20123 Draytek VigorConnect Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 89.7%
CVE-2024-7965 Google Chromium V8 Inappropriate Implementation Vulnerability
CVSS 8.8 highKEV added EPSS 18.5%
CVE-2024-38856 Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2024-7971 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 21.0%
CVE-2024-39717 Versa Director Dangerous File Type Upload Vulnerability
CVSS 6.6 mediumKEV added EPSS 4.0%
CVE-2022-0185 Linux Kernel Heap-Based Buffer Overflow Vulnerability
CVSS 8.4 highKEV added EPSS 25.2%
CVE-2021-33045 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.6%
CVE-2021-33044 Dahua IP Camera Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2021-31196 Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 54.1%
CVE-2024-23897 Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-28986 SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 84.6%
CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 8.2%
CVE-2024-38107 Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2024-38106 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 6.3%
CVE-2024-38213 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 6.5 mediumKEV added EPSS 13.6%
CVE-2024-38193 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 28.7%
CVE-2024-38178 Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 41.4%
CVE-2024-36971 net: fix __dst_negative_advice() race
CVSS 7.8 highKEV added EPSS 2.7%
CVE-2024-32113 Apache OFBiz: Path traversal leading to RCE
CVSS 9.1 criticalKEV added EPSS 99.9%
CVE-2018-0824 Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability
CVSS 7.5 highKEV added EPSS 73.0%
CVE-2024-37085 VMware ESXi Authentication Bypass Vulnerability
CVSS 6.8 mediumKEV added EPSS 26.8%
CVE-2024-5217 Incomplete Input Validation in GlideExpression Script
CVSS 9.8 criticalKEV added EPSS 99.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)