RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-59271 Redis Enterprise Elevation of Privilege Vulnerability
CVSS 8.7 highEPSS 0.66%Microsoft Azure
CVE-2025-55321 Azure Monitor Log Analytics Spoofing Vulnerability
CVSS 9.3 criticalEPSS 0.44%Microsoft Azure
CVE-2025-59247 Azure PlayFab Elevation of Privilege Vulnerability
CVSS 8.8 highEPSS 1.5%Microsoft Azure
CVE-2025-10004 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.53%GitLab
CVE-2025-11340 Incorrect Authorization in GitLab
CVSS 7.7 highEPSS 0.37%GitLab
CVE-2025-2934 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 4.3 mediumEPSS 0.53%GitLab
CVE-2025-11539 Arbitrary Code Execution in Grafana Image Renderer Plugin
CVSS 9.9 criticalEPSS 0.64%Grafana Cloud
CVE-2021-43798 Grafana path traversal
CVSS 7.5 highKEV added EPSS 88.5%Grafana Cloud
CVE-2025-42701 CrowdStrike Falcon Sensor for Windows Race Condition
CVSS 5.6 mediumEPSS 0.13%CrowdStrike
CVE-2025-42706 CrowdStrike Falcon Sensor for Windows Logic Error
CVSS 6.5 mediumEPSS 0.18%CrowdStrike
CVE-2025-5009 Information Disclosure in Gemini iOS App
CVSS 1.0 lowEPSS 0.12%Google Gemini API
CVE-2025-25009 Kibana Cross-Site Scripting (XSS)
CVSS 8.7 highEPSS 0.25%Elastic Cloud
CVE-2025-37728 Kibana Insufficiently Protected Credentials in the CrowdStrike Connector
CVSS 5.4 mediumEPSS 0.28%Elastic Cloud
CVE-2025-27915 Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability
CVSS 5.4 mediumKEV added EPSS 4.1%
CVE-2025-61882 Oracle E-Business Suite Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2021-43226 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 3.3%
CVE-2021-22555 Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
CVSS 8.3 highKEV added EPSS 78.7%
CVE-2013-3918 Microsoft Windows Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 73.7%
CVE-2011-3402 Microsoft Windows Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 78.1%
CVE-2010-3962 Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability
CVSS 8.1 highKEV added EPSS 96.8%
CVE-2010-3765 Mozilla Multiple Products Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 83.2%
CVE-2025-59944 Cursor IDE: Sensitive File Overwrite Bypass is Possible
CVSS 8.1 highEPSS 0.51%Cursor
CVE-2025-49844 Redis Lua Use-After-Free may lead to remote code execution
CVSS 10.0 criticalEPSS 82.6%Redis2 incidents
CVE-2025-46819 Redis is vulnerable to DoS via specially crafted LUA scripts
CVSS 6.3 mediumEPSS 1.1%Redis
CVE-2025-46818 Redis: Authenticated users can execute LUA scripts as a different user
CVSS 6.0 mediumEPSS 0.74%Redis
CVE-2025-46817 Lua library commands may lead to integer overflow and potential RCE
CVSS 7.0 highEPSS 3.9%Redis
CVE-2025-61593 Cursor CLI Agent: Sensitive File Overwrite Bypass
CVSS 7.1 highEPSS 0.42%Cursor
CVE-2025-61592 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config
CVSS 8.8 highEPSS 0.46%Cursor
CVE-2025-61590 Cursor is vulnerable to RCE via .code-workspace files using Prompt Injection
CVSS 7.5 highEPSS 0.53%Cursor
CVE-2025-61589 Cursor: Potential Information Leakage via Mermaid Diagram
CVSS 5.9 mediumEPSS 0.29%Cursor
CVE-2025-4008 Arbitrary Command Injection in Smartbedded MeteoBridge
CVSS 8.8 highKEV added EPSS 93.3%
CVE-2025-21043 Samsung Mobile Devices Out-of-Bounds Write Vulnerability
CVSS 8.8 highKEV added EPSS 2.2%
CVE-2017-1000353 Jenkins Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%
CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 61.1%
CVE-2014-6278 GNU Bash OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 99.7%
CVE-2025-58769 auth0-PHP: Improper File Type Handling in Bulk User Import
CVSS 3.3 lowEPSS 0.35%Auth0
CVE-2025-20370 Denial of Service (DoS) through Multiple LDAP Bind Requests in Splunk Enterprise
CVSS 4.9 mediumEPSS 0.56%Splunk
CVE-2025-20366 Improper Access Control in Background Job Submission in Splunk Enterprise
CVSS 6.5 mediumEPSS 0.45%Splunk
CVE-2025-9230 Out-of-bounds read & write in RFC 3211 KEK Unwrap
CVSS 7.5 high1 incident
CVE-2025-59689 Libraesva Email Security Gateway Command Injection Vulnerability
CVSS 6.1 mediumKEV added EPSS 1.9%
CVE-2025-32463 Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability
CVSS 9.3 criticalKEV added EPSS 55.5%
CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
CVSS 7.7 highKEV added EPSS 41.5%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)