RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-7000 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 4.3 mediumEPSS 0.38%GitLab
CVE-2025-7736 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.35%GitLab
CVE-2025-11865 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.24%GitLab
CVE-2025-11990 Improper Handling of URL Encoding (Hex Encoding) in GitLab
CVSS 3.1 lowEPSS 0.32%GitLab
CVE-2025-64446 Fortinet FortiWeb Path Traversal Vulnerability
CVSS 9.4 criticalKEV added EPSS 91.1%
CVE-2025-11794 Password hash and MFA secret returned in user email verification endpoint
CVSS 4.9 mediumEPSS 0.30%Mattermost
CVE-2025-55073 MS Teams plugin OAuth allows editing arbitrary posts
CVSS 5.4 mediumEPSS 0.20%Mattermost
CVE-2025-55070 Lack of MFA enforcement in WebSocket connections
CVSS 6.5 mediumEPSS 0.32%Mattermost
CVE-2025-11776 Guest user can discover archived public channels
CVSS 4.3 mediumEPSS 0.21%Mattermost
CVE-2025-59480 Inadequate validation of SSO redirect credentials permits credential theft
CVSS 6.1 mediumEPSS 0.15%Mattermost
CVE-2025-11777 Cross-team channel membership access
CVSS 3.1 lowEPSS 0.20%Mattermost
CVE-2025-62484 Zoom Workplace Clients - Inefficient Regular Expression Complexity
CVSS 8.1 highEPSS 0.32%Zoom
CVE-2025-62483 Zoom Clients - Improper Removal of Sensitive Information
CVSS 5.3 mediumEPSS 0.29%Zoom
CVE-2025-62482 Zoom Workplace for Windows - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.21%Zoom
CVE-2025-30662 Zoom Workplace VDI Plugin macOS Universal Installer - Symlink Following
CVSS 6.6 mediumEPSS 0.14%Zoom
CVE-2025-30669 Zoom Workplace Clients - Improper Certificate Validation
CVSS 4.8 mediumEPSS 0.11%Zoom
CVE-2025-64741 Zoom Workplace for Android - Improper Authorization Handling
CVSS 8.1 highEPSS 0.44%Zoom
CVE-2025-64739 Zoom Clients - External Control of File Name or Path
CVSS 4.3 mediumEPSS 0.33%Zoom
CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path
CVSS 5.0 mediumEPSS 0.16%Zoom
CVE-2025-20378 Open Redirect on Web Login endpoint in Splunk Enterprise
CVSS 3.1 lowEPSS 0.25%Splunk
CVE-2025-37734 Kibana Origin Validation Error
CVSS 4.3 mediumEPSS 0.21%Elastic Cloud
CVE-2025-9242 WatchGuard Firebox iked Out of Bounds Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 92.2%
CVE-2025-62215 Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 4.5%
CVE-2025-12480 Gladinet Triofox Improper Access Control Vulnerability
CVSS 9.1 criticalKEV added EPSS 95.7%
CVE-2025-54983 Health check port on ZCC allows tunnel bypass
CVSS 5.2 mediumEPSS 0.13%Zscaler
CVE-2025-41116 Incorrect oauth passthrough in Grafana Databricks Datasource
CVSS 2.1 lowEPSS 0.29%Grafana Cloud
CVE-2025-3717 Incorrect oauth passthrough in Grafana Snowflake Datasource
CVSS 2.1 lowEPSS 0.29%Grafana Cloud
CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability
CVSS 7.3 highEPSS 0.35%Microsoft Azure
CVSS 8.0 highEPSS 0.78%Amazon Web Services
CVE-2025-12405 Unauthorized access through stored credentials in Looker Studio
CVSS 7.7 highEPSS 0.27%Google Cloud
CVE-2025-12409 SQL Injection in Looker Studio
CVSS 7.3 highEPSS 0.27%Google Cloud
CVE-2025-12397 SQL Injection in Looker Studio
CVSS 7.6 highEPSS 0.33%Google Cloud
CVE-2025-12155 Command Injection in Looker
CVSS 7.1 highEPSS 1.3%Google Cloud
CVE-2025-21042 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 35.6%
CVE-2025-37736 Elastic Cloud Enterprise Improper Authorization
CVSS 8.8 highEPSS 0.40%Elastic Cloud
CVE-2025-64347 Apollo Router Improperly Enforces Renamed Access Control Directives
CVSS 7.5 highEPSS 0.33%Apollo GraphQL
CVSS 3.7 lowEPSS 0.28%Vercel
CVSS 6.9 mediumEPSS 0.25%Vercel
CVE-2025-64173 Apollo Router Core: Access Control Bypass on Polymorphic Types
CVSS 7.5 highEPSS 0.34%Apollo GraphQL
CVSS 4.3 mediumEPSS 0.31%Amazon Web Services
CVSS 7.0 highEPSS 0.14%Elastic Cloud
CVE-2025-64110 Cursor: Authentication Bypass Possible via New Cursorignore Write
CVSS 7.5 highEPSS 0.39%Cursor
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)