RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 35.6%
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 99.7%
CVE-2025-11371 Gladinet CentreStack and TrioFox Local File Inclusion Flaw
CVSS 7.5 highKEV added EPSS 92.1%
CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.1 criticalKEV added EPSS 73.7%
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-54236 Adobe Commerce | Improper Input Validation (CWE-20)
CVSS 9.1 criticalKEV added EPSS 94.7%
CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.8%
CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
CVSS 7.5 highKEV added EPSS 95.9%
CVE-2025-33073 Windows SMB Client Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 82.7%
CVE-2025-2747 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 74.1%
CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability
CVSS 8.8 highKEV added EPSS 3.2%
CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVSS 10.0 criticalKEV added EPSS 88.3%
CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.7%
CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.4%
CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability
CVSS 4.6 mediumKEV added EPSS 4.9%
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.2%
CVE-2021-43798 Grafana path traversal
CVSS 7.5 highKEV added EPSS 88.5%Grafana Cloud
CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVSS 5.4 mediumKEV added EPSS 4.1%
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2021-43226 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 3.3%
CVE-2021-22555 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
CVSS 8.3 highKEV added EPSS 78.7%
CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 73.7%
CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 78.1%
CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
CVSS 8.1 highKEV added EPSS 96.8%
CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2025-4008 Arbitrary Command Injection in Smartbedded MeteoBridge
CVSS 8.8 highKEV added EPSS 93.3%
CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 2.2%
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.1%
CVE-2014-6278 GNU Bash OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 99.7%
CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability
CVSS 6.1 mediumKEV added EPSS 1.9%
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVSS 9.3 criticalKEV added EPSS 55.5%
CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
CVSS 7.7 highKEV added EPSS 41.5%
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2021-21311 SSRF in adminer
CVSS 7.2 highKEV added EPSS 98.5%
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVSS 9.9 criticalKEV added EPSS 71.2%
CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 6.1%
CVE-2025-5086 Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.0 criticalKEV added EPSS 96.9%
CVE-2025-48543 Android Runtime Use-After-Free Vulnerability
CVSS 8.8 highKEV added EPSS 0.63%
CVE-2025-53690 Sitecore Products ViewState Deserialization Vulnerability
CVSS 9.0 criticalKEV added EPSS 60.6%
CVE-2025-38352 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2025-9377 Authenticated RCE via Parental Control command injection
CVSS 7.2 highKEV added EPSS 37.7%
CVE-2023-50224 TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability
CVSS 6.5 mediumKEV added EPSS 20.0%
CVE-2025-55177 Meta Platforms WhatsApp Incorrect Authorization Vulnerability
CVSS 5.4 mediumKEV added EPSS 13.1%
CVE-2020-24363 TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability
CVSS 8.8 highKEV added EPSS 22.2%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)