RewindexCVEs
CVEs
615 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-57819 FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
CVSS 9.8 criticalKEV added EPSS 95.0%
CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
CVSS 9.8 criticalKEV added EPSS 20.3%
CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 65.2%
CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability
CVSS 9.4 criticalKEV added EPSS 23.9%
CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 74.5%
CVE-2025-20281 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability
CVSS 9.0 criticalKEV added EPSS 93.5%
CVE-2025-2776 SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 64.7%
CVE-2025-2775 SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 42.6%
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
CVSS 10.0 criticalKEV added EPSS 93.9%
CVE-2016-10033 PHPMailer Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service
CVSS 9.8 criticalKEV added EPSS 10.4%
CVE-2024-54085 Redfish Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 60.7%
CVE-2025-24016 Remote code execution in Wazuh server
CVSS 9.9 criticalKEV added EPSS 93.8%
CVE-2025-32433 Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
CVSS 10.0 criticalKEV added EPSS 98.9%
CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability
CVSS 9.3 criticalKEV added EPSS 82.9%
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.1%
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVSS 9.1 criticalKEV added EPSS 12.9%
CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 30.9%
CVE-2024-6047 GeoVision EOL device - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 10.1%
CVE-2024-11120 GeoVision EOL devices - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 28.4%
CVE-2025-3248 Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability
CVSS 9.0 criticalKEV added EPSS 87.8%
CVE-2024-38475 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 3.4%
CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 13.9%
CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability
CVSS 9.8 criticalKEV added EPSS 20.9%
CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
CVSS 9.0 criticalKEV added EPSS 94.3%
CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2025-24813 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.7%
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
CVSS 9.8 criticalKEV added EPSS 74.5%
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 3.8%
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 32.3%
CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.8%
CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.0%
CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVSS 9.3 criticalKEV added EPSS 1.6%
CVE-2024-4885 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 9.0 criticalKEV added EPSS 77.3%
CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)