RewindexCVEs
CVEs
923 matching vulnerabilities, 615 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-65037 Azure Container Apps Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.97%Microsoft Azure
CVE-2025-64663 Custom Question Answering Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.71%Microsoft Azure
CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 32.4%
CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.2%
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVSS 9.1 criticalKEV added EPSS 68.3%
CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.5%
CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.8%Vercel2 incidents
CVE-2025-64443 DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
CVSS 9.6 criticalEPSS 0.43%Docker
CVE-2025-12421 Account Takeover via Code Exchange Endpoint
CVSS 9.9 criticalEPSS 0.42%Mattermost
CVE-2025-12419 Account takeover on OAuth/OpenID-enabled servers
CVSS 9.9 criticalEPSS 0.34%Mattermost
CVSS 9.8 criticalEPSS 1.4%Cursor
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 0.62%Microsoft Azure
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.62%Microsoft Azure
CVE-2025-41115 Incorrect privilege assignment
CVSS 10.0 criticalEPSS 17.5%Grafana Cloud
CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.6%
CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs
CVSS 9.1 criticalEPSS 0.39%WorkOS
CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.91%Microsoft Azure
CVE-2025-12414 Looker account compromise via punycode homograph attack
CVSS 9.2 criticalEPSS 0.37%Google Cloud
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 91.1%
CVE-2025-9242 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.8%
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability
CVSS 9.1 criticalKEV added EPSS 95.7%
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 99.7%
CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.1 criticalKEV added EPSS 73.7%
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-54236 Adobe Commerce | Improper Input Validation (CWE-20)
CVSS 9.1 criticalKEV added EPSS 94.7%
CVE-2025-59503 Azure Compute Resource Provider Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.77%Microsoft Azure
CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.8%
CVE-2025-2747 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 74.1%
CVSS 9.8 criticalEPSS 0.65%Windsurf
CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVSS 10.0 criticalKEV added EPSS 88.3%
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.2%
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
CVSS 9.3 criticalEPSS 0.44%Microsoft Azure
CVE-2025-11539 Arbitrary Code Execution in Grafana Image Renderer Plugin
CVSS 9.9 criticalEPSS 0.64%Grafana Cloud
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution
CVSS 10.0 criticalEPSS 82.6%Redis2 incidents
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.1%
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVSS 9.3 criticalKEV added EPSS 55.5%
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVSS 9.9 criticalKEV added EPSS 71.2%
CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization
CVSS 9.8 criticalEPSS 2.1%HubSpot
CVE-2025-5086 Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.0 criticalKEV added EPSS 96.9%
CVE-2025-54914 Azure Networking Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 2.5%Microsoft Azure
CVE-2025-55244 Azure Bot Service Elevation of Privilege Vulnerability
CVSS 9.0 criticalEPSS 0.64%Microsoft Azure
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)