RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-10035 Deserialization Vulnerability in GoAnywhere MFT's License Servlet
CVSS 10.0 criticalKEV added EPSS 99.8%
CVE-2021-21311 SSRF in adminer
CVSS 7.2 highKEV added EPSS 98.5%
CVE-2025-8014 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.59%GitLab
CVE-2025-10657 Docker Desktop with ECI Fails to Enforce Socket Command Restrictions
CVSS 8.7 highEPSS 0.14%Docker
CVE-2025-59844 Argument injection vulnerability in SonarQube Scan Action
CVSS 7.7 highEPSS 1.5%SonarCloud
CVE-2025-11042 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 4.3 mediumEPSS 0.32%GitLab
CVE-2025-5069 Incorrect Ownership Assignment in GitLab
CVSS 3.5 lowEPSS 0.25%GitLab
CVE-2025-10868 Business Logic Errors in GitLab
CVSS 3.5 lowEPSS 0.26%GitLab
CVE-2025-7691 Privilege Defined With Unsafe Actions in GitLab
CVSS 6.5 mediumEPSS 0.38%GitLab
CVE-2025-9958 Insertion of Sensitive Information Into Sent Data in GitLab
CVSS 7.7 highEPSS 0.51%GitLab
CVE-2025-10858 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.58%GitLab
CVE-2025-10867 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 3.5 lowEPSS 0.33%GitLab
CVE-2025-10871 Missing Authorization in GitLab
CVSS 3.8 lowEPSS 0.38%GitLab
CVE-2025-20333 Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability
CVSS 9.9 criticalKEV added EPSS 71.2%
CVE-2025-10585 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.8 highKEV added EPSS 9.0%
CVE-2025-6921 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.51%Hugging Face
CVSS 8.8 highEPSS 0.45%Salesforce
CVE-2025-59532 Codex has sandbox bypass due to bug in path configuration logic
CVSS 8.6 highEPSS 0.89%OpenAI
CVE-2025-58199 WordPress Fastly plugin <= 1.2.28 - Cross Site Request Forgery (CSRF) vulnerability
CVSS 4.3 mediumEPSS 0.14%Fastly
CVE-2025-10772 huggingface LeRobot ZeroMQ Socket lekiwi_remote.py missing authentication
CVSS 6.3 mediumEPSS 0.29%Hugging Face
CVE-2025-59427 Cloudflare vite plugin exposes secrets over the built-in dev server
CVSS 2.9 lowEPSS 0.38%Cloudflare
CVE-2025-10630 Regex DoS in Grafana Zabbix Plugin
CVSS 4.3 mediumEPSS 0.36%Grafana Cloud
CVE-2025-59340 jinjava Sandbox Bypass via JavaType-Based Deserialization
CVSS 9.8 criticalEPSS 2.2%HubSpot
CVE-2025-9862 Ghost 6.0.6 - SSRF via oEmbed Bookmark
CVSS 6.5 mediumEPSS 0.52%Ghost
CVSS 6.9 mediumEPSS 0.39%Temporal Cloud
CVE-2025-9084 Open redirect in OAuth login
CVSS 3.1 lowEPSS 0.17%Mattermost
CVE-2025-9078 Weak cache keys lead to post IDOR and link preview poisoning
CVSS 4.3 mediumEPSS 0.15%Mattermost
CVE-2025-6051 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.38%Hugging Face
CVE-2025-6638 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.55%Hugging Face
CVE-2025-1250 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.49%GitLab
CVE-2025-2256 Improper Validation of Specified Quantity in Input in GitLab
CVSS 7.5 highEPSS 0.53%GitLab
CVE-2025-6454 Server-Side Request Forgery (SSRF) in GitLab
CVSS 8.5 highEPSS 0.73%GitLab
CVE-2025-6769 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
CVSS 4.3 mediumEPSS 0.33%GitLab
CVE-2025-7337 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.49%GitLab
CVE-2025-10094 Improper Validation of Specified Quantity in Input in GitLab
CVSS 6.5 mediumEPSS 0.49%GitLab
CVE-2025-58754 Axios is vulnerable to DoS attack through lack of data size check
CVSS 7.5 highEPSS 1.2%Jira
CVE-2025-9918 Zip Slip in Google SecOps SOAR allows for Remote Code Execution
CVSS 8.7 highEPSS 0.63%Google Cloud
CVE-2025-5086 Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVSS 9.0 criticalKEV added EPSS 96.9%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)