RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-64109 Cursor CLI Beta: Command Injection via Untrusted MCP Configuration
CVSS 8.8 highEPSS 0.52%Cursor
CVE-2025-64108 Cursor's Sensitive File Modification can Lead to NTFS Path Quirks
CVSS 8.8 highEPSS 0.49%Cursor
CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows
CVSS 8.8 highEPSS 0.38%Cursor
CVE-2025-64106 Cursor: Speedbump Modal Bypass in MCP Server Deep-Link
CVSS 8.8 highEPSS 0.39%Cursor
CVE-2025-62507 Redis: Bug in XACKDEL may lead to stack overflow and potential RCE
CVSS 8.8 highEPSS 7.5%Redis
CVSS 5.3 mediumEPSS 0.22%Salesforce
CVSS 5.3 mediumEPSS 0.24%Salesforce
CVSS 6.5 mediumEPSS 0.22%Salesforce
CVSS 5.3 mediumEPSS 0.22%Salesforce
CVSS 5.3 mediumEPSS 0.24%Salesforce
CVSS 6.5 mediumEPSS 0.21%Salesforce
CVE-2025-48703 CWP Control Web Panel OS Command Injection Vulnerability
CVSS 9.0 criticalKEV added EPSS 99.7%
CVE-2025-11371 Gladinet CentreStack and TrioFox Local File Inclusion Flaw
CVSS 7.5 highKEV added EPSS 92.1%
CVE-2025-12657 Malformed KMIP response may result in access violation
CVSS 5.0 mediumEPSS 0.39%MongoDB Atlas
CVE-2025-24893 Remote code execution as guest via SolrSearchMacros request in xwiki
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-11702 Missing Authorization in GitLab
CVSS 8.5 highEPSS 0.61%GitLab
CVE-2025-11374 Consul's KV endpoint is vulnerable to denial of service
CVSS 6.5 mediumEPSS 0.43%HashiCorp
CVE-2025-11375 Consul's event endpoint is vulnerable to denial of service
CVSS 6.5 mediumEPSS 0.43%HashiCorp
CVE-2025-6205 Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.1 criticalKEV added EPSS 73.7%
CVE-2025-6601 Business Logic Errors in GitLab
CVSS 2.7 lowEPSS 0.32%GitLab
CVE-2025-10497 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.62%GitLab
CVE-2025-11971 Incorrect Authorization in GitLab
CVSS 6.5 mediumEPSS 0.25%GitLab
CVE-2025-11974 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.38%GitLab
CVE-2025-11447 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.82%GitLab
CVE-2025-11989 Missing Authorization in GitLab
CVSS 3.7 lowEPSS 0.18%GitLab
CVE-2025-59287 Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-54236 Adobe Commerce | Improper Input Validation (CWE-20)
CVSS 9.1 criticalKEV added EPSS 94.7%
CVE-2025-59503 Azure Compute Resource Provider Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 0.77%Microsoft Azure
CVE-2025-59273 Azure Event Grid System Elevation of Privilege Vulnerability
CVSS 7.3 highEPSS 0.38%Microsoft Azure
CVE-2025-59500 Azure Notification Service Elevation of Privilege Vulnerability
CVSS 7.7 highEPSS 0.55%Microsoft Azure
CVE-2025-62517 Rollbar.js Prototype Pollution Vulnerability in merge()
CVSS 5.9 mediumEPSS 0.39%Rollbar
CVE-2025-12044 Vault Vulnerable to Denial of Service Due to Rate Limit Regression
CVSS 7.5 highEPSS 0.53%HashiCorp
CVE-2025-11621 Vault AWS auth method bypass due to AWS client cache
CVSS 8.1 highEPSS 0.49%HashiCorp
CVSS 4.9 mediumEPSS 0.22%Slack
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 5.4 mediumEPSS 0.18%Jira
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 4.3 mediumEPSS 0.19%Jira
CVSS 4.3 mediumEPSS 0.20%Jira
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)