RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-4879 Jelly Template Injection Vulnerability in ServiceNow UI Macros
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-45249 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2024-39891 Twilio Authy Information Disclosure Vulnerability
CVSS 5.3 mediumKEV added EPSS 1.7%Twilio
CVE-2012-4792 Microsoft Internet Explorer Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 78.8%
CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-28995 SolarWinds Serv-U L Directory Transversal Vulnerability
CVSS 8.6 highKEV added EPSS 99.6%
CVE-2022-22948 VMware vCenter Server Incorrect Default File Permissions Vulnerability
CVSS 6.5 mediumKEV added EPSS 13.3%
CVE-2024-36401 Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver
CVSS 9.8 criticalKEV added EPSS 99.8%
CVE-2024-38112 Windows MSHTML Platform Spoofing Vulnerability
CVSS 7.5 highKEV added EPSS 84.2%
CVE-2024-38080 Windows Hyper-V Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 7.1%
CVE-2024-23692 Rejetto HTTP File Server 2.3m Unauthenticated RCE
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2024-20399 Cisco NX-OS Software CLI Command Injection Vulnerability
CVSS 6.0 mediumKEV added EPSS 4.3%
CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability
CVSS 5.3 mediumKEV added EPSS 10.2%
CVE-2022-24816 Improper Control of Generation of Code in jai-ext
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2020-13965 Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
CVSS 6.3 mediumKEV added EPSS 76.6%
CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability
CVSS 8.1 highKEV added EPSS 3.0%
CVE-2024-4358 Registration Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.5%
CVE-2024-26169 Windows Error Reporting Service Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 4.0%
CVE-2024-4610 Mali GPU Kernel Driver allows improper GPU memory processing operations
CVSS 7.4 highKEV added EPSS 0.76%
CVE-2024-4577 Argument Injection in PHP-CGI
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2017-3506 Oracle WebLogic Server OS Command Injection Vulnerability
CVSS 7.4 highKEV added EPSS 96.0%
CVE-2024-24919 Information disclosure
CVSS 8.6 highKEV added EPSS 100.0%
CVE-2024-1086 Use-after-free in Linux kernel's netfilter: nf_tables component
CVSS 7.8 highKEV added EPSS 28.1%
CVE-2024-4978 Malicious Code in Justice AV Solutions (JAVS) Viewer
CVSS 8.4 highKEV added EPSS 26.9%
CVE-2024-5274 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.3 highKEV added EPSS 7.7%
CVE-2020-17519 Apache Flink directory traversal attack: reading remote files through the REST API
CVSS 9.1 criticalKEV added EPSS 98.0%
CVE-2024-4947 Google Chromium V8 Type Confusion Vulnerability
CVSS 9.6 criticalKEV added EPSS 15.2%
CVE-2023-43208 NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability
CVSS 9.8 criticalKEV added EPSS 85.4%
CVE-2024-4761 Google Chromium V8 Out-of-Bounds Memory Write Vulnerability
CVSS 8.3 highKEV added EPSS 11.0%
CVE-2021-40655 D-Link DIR-605 Router Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 87.0%
CVE-2014-100005 D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability
CVSS 8.0 highKEV added EPSS 43.5%
CVE-2024-30051 Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 5.7%
CVE-2024-30040 Windows MSHTML Platform Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 3.9%
CVE-2024-4671 Google Chromium Visuals Use-After-Free Vulnerability
CVSS 9.6 criticalKEV added EPSS 8.3%
CVE-2023-7028 Weak Password Recovery Mechanism for Forgotten Password in GitLab
CVSS 10.0 criticalKEV added EPSS 94.5%GitLab
CVE-2024-29988 SmartScreen Prompt Security Feature Bypass Vulnerability
CVSS 8.8 highKEV added EPSS 45.2%
CVE-2024-20359 Cisco ASA and FTD Privilege Escalation Vulnerability
CVSS 6.0 mediumKEV added EPSS 18.8%
CVE-2024-20353 Cisco ASA and FTD Denial of Service Vulnerability
CVSS 8.6 highKEV added EPSS 69.8%
CVE-2024-4040 Unauthenticated arbitrary file read and remote code execution in CrushFTP
CVSS 9.8 criticalKEV added EPSS 99.5%
CVE-2022-38028 Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 14.9%
CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-3273 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection
CVSS 7.3 highKEV added EPSS 100.0%
CVE-2024-3272 D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials
CVSS 9.8 criticalKEV added EPSS 98.1%
CVE-2024-29748 Android Pixel Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.68%
CVE-2024-29745 Android Pixel Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 0.49%
CVE-2023-24955 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 7.2 highKEV added EPSS 85.0%
CVE-2023-48788 Fortinet FortiClient EMS SQL Injection Vulnerability
CVSS 9.3 criticalKEV added EPSS 98.4%
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.1%
CVE-2019-7256 Nice Linear eMerge E3-Series OS Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2024-27198 JetBrains TeamCity Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)