RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-57819 FreePBX Affected by Authentication Bypass Leading to SQL Injection and RCE
CVSS 9.8 criticalKEV added EPSS 95.0%
CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
CVSS 9.8 criticalKEV added EPSS 20.7%
CVE-2025-48384 Git allows arbitrary code execution through broken config quoting
CVSS 8.1 highKEV added EPSS 4.4%
CVE-2024-8069 Limited remote code execution with privilege of a NetworkService Account access
CVSS 8.0 highKEV added EPSS 21.1%
CVE-2024-8068 Privilege escalation to NetworkService Account access
CVSS 8.0 highKEV added EPSS 3.5%
CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 65.2%
CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability
CVSS 9.4 criticalKEV added EPSS 25.4%
CVE-2025-8875 Insecure Deserialization Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2025-8876 Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 3.4%
CVE-2025-8088 Path traversal vulnerability in WinRAR
CVSS 8.8 highKEV added EPSS 94.5%
CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability
CVSS 8.8 highKEV added EPSS 87.6%
CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 43.2%
CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
CVSS 8.8 highKEV added EPSS 33.6%
CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 54.0%
CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 97.5%
CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 74.5%
CVE-2025-20281 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2023-2533 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
CVSS 8.4 highKEV added EPSS 28.8%
CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
CVSS 8.8 highKEV added EPSS 10.9%
CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability
CVSS 9.0 criticalKEV added EPSS 93.5%
CVE-2025-49706 Microsoft SharePoint Server Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 99.1%
CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2025-2776 SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 64.7%
CVE-2025-2775 SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 42.6%
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
CVSS 10.0 criticalKEV added EPSS 93.9%
CVE-2025-5777 NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
CVSS 7.5 highKEV added EPSS 100.0%
CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
CVSS 7.5 highKEV added EPSS 81.0%
CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 98.5%
CVE-2016-10033 PHPMailer Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%WordPress.com
CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.1 highKEV added EPSS 14.1%
CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
CVSS 4.0 mediumKEV added EPSS 0.58%
CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
CVSS 5.3 mediumKEV added EPSS 11.6%
CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service
CVSS 9.8 criticalKEV added EPSS 10.4%
CVE-2024-54085 Redfish Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 60.7%
CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
CVSS 5.3 mediumKEV added EPSS 82.7%
CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
CVSS 6.5 mediumKEV added EPSS 6.6%
CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability
CVSS 7.8 highKEV added EPSS 7.9%
CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability
CVSS 4.2 mediumKEV added EPSS 1.2%
CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 41.6%
CVE-2025-33053 Internet Shortcut Files Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 87.0%
CVE-2025-24016 Remote code execution in Wazuh server
CVSS 9.9 criticalKEV added EPSS 93.8%
CVE-2025-32433 Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
CVSS 10.0 criticalKEV added EPSS 98.9%
CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability
CVSS 9.3 criticalKEV added EPSS 82.9%
CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVSS 8.8 highKEV added EPSS 7.8%
CVE-2025-21479 Incorrect Authorization in Graphics
CVSS 8.6 highKEV added EPSS 0.84%
CVE-2025-27038 Use After Free in Graphics
CVSS 7.5 highKEV added EPSS 1.1%
CVE-2025-21480 Incorrect Authorization in Graphics Windows
CVSS 8.6 highKEV added EPSS 0.46%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)