RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-12734 Improper Encoding or Escaping of Output in GitLab
CVSS 3.5 lowEPSS 0.27%GitLab
CVE-2025-58360 GeoServer is vulnerable to an Unauthenticated XML External Entities (XXE) attack via WMS GetMap feature
CVSS 8.2 highKEV added EPSS 61.2%
CVE-2025-4097 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.30%GitLab
CVE-2025-8405 Improper Encoding or Escaping of Output in GitLab
CVSS 7.7 highEPSS 0.52%GitLab
CVE-2025-11247 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 4.3 mediumEPSS 0.24%GitLab
CVE-2025-11984 Authentication Bypass Using an Alternate Path or Channel in GitLab
CVSS 6.8 mediumEPSS 0.39%GitLab
CVE-2025-12562 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.86%GitLab
CVE-2025-13978 Generation of Error Message Containing Sensitive Information in GitLab
CVSS 4.3 mediumEPSS 0.30%GitLab
CVE-2025-14157 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.31%GitLab
CVE-2025-67716 Auth0 Next.js SDK has Improper Validation of Query Parameters
CVSS 5.7 mediumEPSS 0.26%Auth0
CVE-2025-67505 Race condition in the Okta Java SDK
CVSS 8.4 highEPSS 0.21%Okta
CVE-2025-67490 Auth0 Next.js SDK has Improper Request Caching Lookup
CVSS 5.4 mediumEPSS 0.20%Auth0
CVE-2025-66033 Improper Memory Cleanup in the Okta Java SDK
CVSS 5.3 mediumEPSS 0.27%Okta
CVE-2025-67460 Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
CVSS 7.8 highEPSS 0.16%Zoom
CVE-2025-67461 Zoom Rooms for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.14%Zoom
CVE-2025-12952 Privilege Escalation in Dialogflow CX via Webhook Admin Role
CVSS 8.7 highEPSS 0.37%Google Cloud
CVE-2025-62221 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.5%
CVE-2025-62550 Azure Monitor Agent Remote Code Execution Vulnerability
CVSS 8.8 highEPSS 0.74%Microsoft Azure
CVE-2025-13428 RCE in SecOps SOAR server via user-provided Python packages
CVSS 7.2 highEPSS 0.33%Google Cloud
CVE-2025-6218 RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 90.5%
CVE-2025-48633 Android Framework Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 0.26%
CVE-2025-48572 Android Framework Privilege Escalation Vulnerability
CVSS 7.8 highKEV added EPSS 0.26%
CVE-2025-66644 Array Networks ArrayOS AG OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 3.4%
CVE-2022-37055 D-Link Routers Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 55.5%
CVE-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
CVSS 7.7 highEPSS 0.25%GitLab
CVE-2025-55182 Meta React Server Components Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 99.8%Vercel2 incidents
CVE-2025-65945 auth0/node-jws improper HMAC signature verification vulnerability
CVSS 7.5 highEPSS 0.22%Auth0
CVSS 4.8 mediumEPSS 0.26%Akamai
CVE-2025-64443 DNS Rebinding vulnerability present when running MCP Gateway in sse or streaming mode
CVSS 9.6 criticalEPSS 0.43%Docker
CVE-2025-20389 Improper Input Validation in "label" column field in Splunk Secure Gateway App
CVSS 4.3 mediumEPSS 0.41%Splunk
CVE-2025-20384 Unauthenticated Log Injection in Splunk Enterprise
CVSS 5.3 mediumEPSS 0.38%Splunk
CVE-2025-20382 URL validation bypass through Views Dashboard in Splunk Enterprise
CVSS 3.5 lowEPSS 0.23%Splunk
CVE-2021-26828 OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability
CVSS 8.8 highKEV added EPSS 39.1%
CVSS 7.8 highEPSS 0.15%Akamai
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)