RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-13353 gokey allows secret recovery from a seed file without the master password
CVSS 5.5 mediumEPSS 0.16%Cloudflare
CVE-2025-13870 Unauthorized access and subscription vulnerability in Boards
CVSS 3.1 lowEPSS 0.22%Mattermost
CVE-2021-26829 OpenPLC ScadaBR Cross-site Scripting Vulnerability
CVSS 5.4 mediumKEV added EPSS 48.1%
CVE-2025-12421 Account Takeover via Code Exchange Endpoint
CVSS 9.9 criticalEPSS 0.45%Mattermost
CVE-2025-12559 Information Disclosure in Common Teams API
CVSS 4.3 mediumEPSS 0.23%Mattermost
CVE-2025-12419 Account takeover on OAuth/OpenID-enabled servers
CVSS 9.9 criticalEPSS 0.37%Mattermost
CVE-2025-6195 Direct Request ('Forced Browsing') in GitLab
CVSS 4.3 mediumEPSS 0.34%GitLab
CVE-2025-7449 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.44%GitLab
CVE-2025-12571 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.53%GitLab
CVE-2025-12653 Authentication Bypass by Spoofing in GitLab
CVSS 6.5 mediumEPSS 0.31%GitLab
CVE-2025-13611 Insertion of Sensitive Information into Log File in GitLab
CVSS 2.0 lowEPSS 0.27%GitLab
CVSS 9.8 criticalEPSS 1.3%Cursor
CVE-2025-66020 Valibot has a ReDoS vulnerability in `EMOJI_REGEX`
CVSS 7.5 highEPSS 0.36%Confluence
CVE-2025-64657 Azure Application Gateway Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 0.67%Microsoft Azure
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
CVSS 9.4 criticalEPSS 0.67%Microsoft Azure
CVE-2025-12742 Remote Code Execution in Looker via Teradata JDBC Driver
CVSS 7.5 highEPSS 0.25%Google Cloud
CVE-2025-13644 MongoDB may be susceptible to Invariant Failure due to batched delete
CVSS 6.5 mediumEPSS 0.35%MongoDB Atlas
CVE-2025-13507 Time-series operations may cause internal BSON size limit to be exceed
CVSS 6.5 mediumEPSS 0.31%MongoDB Atlas
CVE-2025-12740 Remote Command Execution in Looker via IBM DB2 JDBC drive
CVSS 7.7 highEPSS 0.26%Google Cloud
CVE-2025-65107 Langfuse SSO Account Takeover via CSRF or phishing attack
CVSS 6.5 mediumEPSS 0.17%Langfuse
CVSS 5.7 mediumEPSS 0.26%Amazon Web Services
CVE-2025-41115 Incorrect privilege assignment
CVSS 10.0 criticalEPSS 17.5%Grafana Cloud
CVE-2025-9825 Missing Authorization in GitLab
CVSS 5.0 mediumEPSS 0.39%GitLab
CVE-2025-61757 Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability
CVSS 9.8 criticalKEV added EPSS 88.6%
CVE-2025-64762 authkit-nextjs may let session cookies be cached in CDNs
CVSS 9.1 criticalEPSS 0.39%WorkOS
CVE-2025-62207 Azure Monitor Elevation of Privilege Vulnerability
CVSS 8.6 highEPSS 0.76%Microsoft Azure
CVE-2025-49752 Azure Bastion Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.91%Microsoft Azure
CVE-2025-12414 Looker account compromise via punycode homograph attack
CVSS 9.2 criticalEPSS 0.37%Google Cloud
CVE-2025-13223 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 4.9%
CVE-2025-12119 Bulk write with options may read invalid memory
CVSS 6.8 mediumEPSS 0.21%MongoDB Atlas
CVE-2025-58034 Fortinet FortiWeb OS Command Injection Vulnerability
CVSS 6.7 mediumKEV added EPSS 54.7%
CVE-2025-55074 Channel member objects leak read status
CVSS 3.0 lowEPSS 0.18%Mattermost
CVSS 3.2 lowEPSS 0.12%Canva
CVE-2025-12983 Memory Allocation with Excessive Size Value in GitLab
CVSS 3.5 lowEPSS 0.45%GitLab
CVE-2025-2615 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 4.3 mediumEPSS 0.40%GitLab
CVE-2025-6171 Missing Authorization in GitLab
CVSS 5.3 mediumEPSS 0.34%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)