RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 4.3 mediumEPSS 0.21%Jira
CVSS 5.4 mediumEPSS 0.18%Jira
CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
CVSS 5.4 mediumEPSS 0.28%Hugging Face
CVE-2025-11915 HTTP Desynchronisation in Vertex AI for certain third-party models
CVSS 6.9 mediumEPSS 0.32%Google Cloud
CVE-2025-61932 Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability
CVSS 9.8 criticalKEV added EPSS 2.8%
CVSS 6.5 mediumEPSS 0.50%Jira
CVSS 7.5 highEPSS 0.50%Confluence
CVE-2025-61884 Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability
CVSS 7.5 highKEV added EPSS 95.9%
CVE-2025-33073 Windows SMB Client Elevation of Privilege Vulnerability
CVSS 8.8 highKEV added EPSS 82.7%
CVE-2025-2747 Kentico Xperience <= 13.0.178 Staging Sync Server None Password Type Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 97.2%
CVE-2025-2746 Kentico Xperience <= 13.0.172 Staging Sync Server Digest Password Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 74.1%
CVE-2022-48503 Apple Multiple Products Unspecified Vulnerability
CVSS 8.8 highKEV added EPSS 3.2%
CVSS 9.8 criticalEPSS 0.65%Windsurf
CVE-2025-53092 Strapi core vulnerable to sensitive data exposure via CORS misconfiguration
CVSS 6.5 mediumEPSS 0.29%Strapi Cloud
CVE-2025-25298 Missing Maximum Password Length Validation in Strapi Password Hashing
CVSS 5.3 mediumEPSS 0.40%Strapi Cloud
CVE-2024-56143 Strapi Allows Unauthorized Access to Private Fields via parms.lookup
CVSS 8.2 highEPSS 0.42%Strapi Cloud
CVE-2025-55035 Mattermost Desktop DoS when user has basic authentication server configured
CVSS 6.1 mediumEPSS 0.32%Mattermost
CVE-2025-3930 Lack of JWT Expiration after Log Out in Strapi
CVSS 6.3 mediumEPSS 0.69%Strapi Cloud
CVE-2025-58073 Arbitrary Mattermost Team can be joined by manipulating the OAuth state
CVSS 8.1 highEPSS 0.42%Mattermost
CVE-2025-41410 Slack import bypasses email verification for team access controls
CVSS 5.4 mediumEPSS 0.30%Mattermost
CVE-2025-10545 Guest user can add unauthorized team users to private channels
CVSS 3.1 lowEPSS 0.33%Mattermost
CVE-2025-54499 Insecure string comparison enables timing attacks
CVSS 3.1 lowEPSS 0.27%Mattermost
CVE-2025-41443 Guest user can discover active public channels
CVSS 4.3 mediumEPSS 0.31%Mattermost
CVE-2025-58133 Zoom Rooms Clients - Authentication Bypass
CVSS 5.3 mediumEPSS 0.28%Zoom
CVE-2025-58132 Zoom Clients for Windows - Command Injection
CVSS 4.1 mediumEPSS 1.8%Zoom
CVE-2025-54253 Adobe Experience Manager | Incorrect Authorization (CWE-863)
CVSS 10.0 criticalKEV added EPSS 88.8%
CVE-2025-59285 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.0 highEPSS 0.78%Microsoft Azure
CVE-2025-59230 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.7%
CVE-2025-59494 Azure Monitor Agent Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.63%Microsoft Azure
CVE-2025-59292 Azure Compute Gallery Elevation of Privilege Vulnerability
CVSS 8.2 highEPSS 0.44%Microsoft Azure
CVE-2025-24990 Windows Agere Modem Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 6.4%
CVE-2025-36730 Windsurf Prompt Injection via Filename
CVSS 4.6 mediumEPSS 0.19%Windsurf
CVE-2025-47827 IGEL OS Use of a Key Past its Expiration Date Vulnerability
CVSS 4.6 mediumKEV added EPSS 4.9%
CVE-2016-7836 SKYSEA Client View Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 19.2%
CVE-2025-11695 Configuration may unexpectedly disable certificate validation
CVSS 8.0 highEPSS 0.18%MongoDB Atlas
CVE-2025-11579 DoS via Out Of Memory Crash
CVSS 5.3 mediumEPSS 0.37%Mattermost
CVE-2025-37727 Elasticsearch Insertion of sensitive information in log file
CVSS 5.7 mediumEPSS 0.25%Elastic Cloud
CVE-2025-25017 Kibana Stored Cross-Site Scripting (XSS)
CVSS 8.2 highEPSS 0.27%Elastic Cloud
CVE-2025-25018 Kibana Stored Cross-Site Scripting (XSS)
CVSS 8.7 highEPSS 0.23%Elastic Cloud
CVSS 4.3 mediumEPSS 0.22%SonarCloud
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)