RewindexCVEs
CVEs
1,756 matching vulnerabilities, 1,756 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-3935 ScreenConnect Exposure to ASP.NET ViewState Code Injection
CVSS 8.1 highKEV added EPSS 3.6%
CVE-2025-35939 Craft CMS stores user-provided content in session files
CVSS 5.3 mediumKEV added EPSS 1.3%
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 39.5%
CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.1%
CVE-2025-4428 Remote Code Execution
CVSS 7.2 highKEV added EPSS 88.0%
CVE-2025-4427 Authentication Bypass
CVSS 5.3 mediumKEV added EPSS 99.9%
CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 1.9%
CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 24.6%
CVE-2024-11182 Stored XSS vulnerability in MDaemon Email Server
CVSS 6.1 mediumKEV added EPSS 33.3%
CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 92.5%
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVSS 9.1 criticalKEV added EPSS 12.9%
CVE-2024-12987 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
CVSS 7.3 highKEV added EPSS 98.2%
CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 30.9%
CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 27.3%
CVE-2025-32709 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.8%
CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.3%
CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2025-30400 Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability
CVSS 1.9 lowKEV added EPSS 0.45%
CVE-2024-6047 GeoVision EOL device - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 10.1%
CVE-2024-11120 GeoVision EOL devices - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 28.4%
CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability
CVSS 8.1 highKEV added EPSS 27.8%
CVE-2025-3248 Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability
CVSS 9.0 criticalKEV added EPSS 87.8%
CVE-2024-38475 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 76.2%
CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 3.4%
CVE-2025-3928 Commvault Web Server unspecified vulnerability
CVSS 8.8 highKEV added EPSS 2.5%
CVE-2025-1976 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
CVSS 6.7 mediumKEV added EPSS 0.69%
CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 13.9%
CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability
CVSS 9.8 criticalKEV added EPSS 20.9%
CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 62.3%
CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVSS 6.5 mediumKEV added EPSS 4.4%
CVE-2024-53197 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVSS 7.8 highKEV added EPSS 4.1%
CVE-2024-53150 ALSA: usb-audio: Fix out of bounds reads when finding clock sources
CVSS 7.1 highKEV added EPSS 1.4%
CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 19.3%
CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
CVSS 9.0 criticalKEV added EPSS 94.3%
CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2025-24813 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVSS 8.3 highKEV added EPSS 9.2%
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVSS 8.8 highKEV added EPSS 25.4%
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.7%
CVE-2025-30154 Multiple Reviewdog actions were compromised during a specific time period
CVSS 8.6 highKEV added EPSS 2.5%
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection
CVSS 9.8 criticalKEV added EPSS 74.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)