RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 6.4 mediumEPSS 0.52%Mintlify
CVSS 5.0 mediumEPSS 0.41%Mintlify
CVSS 8.3 highEPSS 1.1%Mintlify
CVSS 6.4 mediumEPSS 0.36%Mintlify
CVE-2025-64675 Azure Cosmos DB Spoofing Vulnerability
CVSS 8.3 highEPSS 0.71%Microsoft Azure
CVE-2025-68422 Kibana Improper Authorization
CVSS 4.3 mediumEPSS 0.23%Elastic Cloud
CVE-2025-68386 Kibana Improper Authorization
CVSS 4.3 mediumEPSS 0.19%Elastic Cloud
CVE-2025-68390 Elasticsearch Allocation of Resources Without Limits or Throttling
CVSS 4.9 mediumEPSS 0.38%Elastic Cloud
CVE-2025-68389 Kibana Allocation of Resources Without Limits or Throttling
CVSS 6.5 mediumEPSS 0.31%Elastic Cloud
CVE-2025-68384 Elasticsearch Allocation of Resources Without Limits or Throttling
CVSS 6.5 mediumEPSS 0.32%Elastic Cloud
CVE-2025-65037 Azure Container Apps Remote Code Execution Vulnerability
CVSS 10.0 criticalEPSS 0.97%Microsoft Azure
CVE-2025-64663 Custom Question Answering Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.71%Microsoft Azure
CVE-2025-68383 Filebeat Improper Validation of Specified Index, Position, or Offset in Input
CVSS 6.5 mediumEPSS 0.19%Elastic Cloud
CVE-2025-13427 Authentication Bypass in Dialogflow CX Messenger
CVSS 6.9 mediumEPSS 0.47%Google Cloud
CVE-2025-68382 Packetbeat Out-of-bounds Read
CVSS 6.5 mediumEPSS 0.25%Elastic Cloud
CVE-2025-68381 Packetbeat Improper Bounds Check
CVSS 6.5 mediumEPSS 0.46%Elastic Cloud
CVSS 5.3 mediumEPSS 0.41%Elastic Cloud
CVE-2025-40602 SonicWall SMA1000 Missing Authorization Vulnerability
CVSS 6.6 mediumKEV added EPSS 2.8%
CVE-2025-68129 Auth0-PHP SDK has Improper Audience Validation
CVSS 6.8 mediumEPSS 0.43%Auth0
CVE-2025-43529 Apple Multiple Products Use-After-Free WebKit Vulnerability
CVSS 8.8 highKEV added EPSS 25.7%
CVSS 5.3 mediumEPSS 0.11%Amazon Web Services
CVSS 5.3 mediumEPSS 0.12%Amazon Web Services
CVSS 5.3 mediumEPSS 0.21%Amazon Web Services
CVSS 5.3 mediumEPSS 0.21%Amazon Web Services
CVSS 5.3 mediumEPSS 0.17%Amazon Web Services
CVSS 5.3 mediumEPSS 0.11%Amazon Web Services
CVE-2025-12689 DoS in Calls plugin via malformed UTF-8 in WebSocket request
CVSS 6.5 mediumEPSS 0.29%Mattermost
CVE-2025-20393 Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 32.4%
CVE-2025-62690 Open redirect in error page when link opened in new tab
CVSS 3.1 lowEPSS 0.15%Mattermost
CVE-2025-62190 CSRF Allows Call Initiation and Message Delivery
CVSS 4.3 mediumEPSS 0.12%Mattermost
CVE-2025-59374 ASUS Live Update Embedded Malicious Code Vulnerability
CVSS 9.8 criticalKEV added EPSS 1.2%
CVSS 7.5 highEPSS 0.26%Confluence
CVE-2025-59718 Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVSS 9.1 criticalKEV added EPSS 68.3%
CVE-2025-14503 Overly Permissive Trust Policy in Harmonix on AWS EKS
CVSS 7.2 highEPSS 0.52%Amazon Web Services
CVE-2025-37731 Elasticsearch Improper Authentication
CVSS 6.8 mediumEPSS 0.19%Elastic Cloud
CVE-2025-37732 Kibana Cross-site Scripting via the Integration Package Upload Functionality
CVSS 5.4 mediumEPSS 0.18%Elastic Cloud
CVE-2025-14611 Gladinet CentreStack and TrioFox Hard Coded AES Keys
CVSS 9.8 criticalKEV added EPSS 53.3%
CVE-2025-14174 Google Chromium Out of Bounds Memory Access Vulnerability
CVSS 8.8 highKEV added EPSS 55.3%
CVE-2018-4063 Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS 8.8 highKEV added EPSS 27.3%
CVSS 4.9 mediumEPSS 0.50%Weaviate
CVSS 7.2 highEPSS 0.91%Weaviate
CVSS 7.5 highEPSS 20.0%Vercel
CVSS 7.5 highEPSS 66.6%Vercel
CVSS 5.3 mediumEPSS 64.2%Vercel
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)