RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-23296 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2024-23225 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.8 highKEV added EPSS 1.5%
CVE-2023-21237 Android Pixel Information Disclosure Vulnerability
CVSS 6.2 mediumKEV added EPSS 0.27%
CVE-2021-36380 Sunhillo SureLine OS Command Injection Vulnerablity
CVSS 9.8 criticalKEV added EPSS 97.8%
CVE-2024-21338 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 59.8%
CVE-2023-29360 Microsoft Streaming Service Elevation of Privilege Vulnerability
CVSS 8.4 highKEV added EPSS 21.6%
CVE-2024-1709 Authentication bypass using an alternate path or channel
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2024-21410 Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 12.7%
CVE-2024-21412 Internet Shortcut Files Security Feature Bypass Vulnerability
CVSS 8.1 highKEV added EPSS 99.4%
CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability
CVSS 7.6 highKEV added EPSS 27.8%
CVE-2023-43770 Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 63.7%
CVE-2024-21762 Fortinet FortiOS Out-of-Bound Write Vulnerability
CVSS 9.6 criticalKEV added EPSS 84.6%
CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 41.4%
CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability
CVSS 8.2 highKEV added EPSS 100.0%
CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability
CVSS 7.0 highKEV added EPSS 0.49%
CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%Confluence
CVE-2024-23222 Apple Multiple Products WebKit Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 10.6%
CVE-2023-34048 VMware vCenter Server Out-of-Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.2%
CVE-2023-35082 Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
CVSS 10.0 criticalKEV added EPSS 100.0%
CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
CVSS 8.2 highKEV added EPSS 57.6%
CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
CVSS 5.5 mediumKEV added EPSS 3.2%
CVE-2024-0519 Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
CVSS 8.8 highKEV added EPSS 3.8%
CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability
CVSS 8.1 highKEV added EPSS 76.6%
CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability
CVSS 8.2 highKEV added EPSS 100.0%
CVE-2023-29357 Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-41990 Apple Multiple Products Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2023-38203 Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2023-27524 Apache Superset: Session validation vulnerability when using provided default SECRET_KEY
CVSS 8.9 highKEV added EPSS 98.1%
CVE-2023-23752 [20230201] - Core - Improper access check in webservice endpoints
CVSS 5.3 mediumKEV added EPSS 99.8%
CVE-2016-20017 D-Link DSL-2750B Devices Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 65.8%
CVE-2023-7101 Arbitrary Code Execution (ACE) Vulnerability
CVSS 7.8 highKEV added EPSS 19.0%
CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability
CVSS 8.8 highKEV added EPSS 6.7%
CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 50.4%
CVE-2023-47565 Legacy VioStor NVR
CVSS 8.0 highKEV added EPSS 73.3%
CVE-2023-6448 Unitronics VisiLogic uses a default administrative password
CVSS 9.8 criticalKEV added EPSS 2.1%
CVE-2023-41266 Qlik Sense Path Traversal Vulnerability
CVSS 8.2 highKEV added EPSS 84.8%
CVE-2023-41265 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 88.2%
CVE-2023-33107 Integer Overflow or Wraparound in Graphics Linux
CVSS 8.4 highKEV added EPSS 0.74%
CVE-2023-33106 Use of Out-of-range Pointer Offset in Graphics
CVSS 8.4 highKEV added EPSS 0.79%
CVE-2023-33063 Use After Free in DSP Services
CVSS 7.8 highKEV added EPSS 0.67%
CVE-2022-22071 Qualcomm Multiple Chipsets Use-After-Free Vulnerability
CVSS 8.4 highKEV added EPSS 0.41%
CVE-2023-42917 Apple Multiple Products WebKit Memory Corruption Vulnerability
CVSS 8.8 highKEV added EPSS 9.3%
CVE-2023-42916 Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability
CVSS 6.5 mediumKEV added EPSS 17.8%
CVE-2023-6345 Google Skia Integer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 16.5%
CVE-2023-49103 ownCloud graphapi Information Disclosure Vulnerability
CVSS 10.0 criticalKEV added EPSS 77.8%
CVE-2023-4911 Glibc: buffer overflow in ld.so leading to privilege escalation
CVSS 7.8 highKEV added EPSS 63.8%
CVE-2023-36584 Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS 5.4 mediumKEV added EPSS 3.3%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)