RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 9.3 criticalEPSS 0.21%SalesforceTableau
CVE-2025-8402 Nil pointer dereference in bulk import crashes server
CVSS 4.9 mediumEPSS 0.32%Mattermost
CVE-2025-6465 Path traversal in image upload with preview overwrite
CVSS 4.3 mediumEPSS 0.77%Mattermost
CVE-2025-47870 Team invite ID leaked to team admin with no member invite privileges
CVSS 4.3 mediumEPSS 0.22%Mattermost
CVE-2025-49222 Mattermost Shared Channel Upload Type Validation Bypass
CVSS 6.8 mediumEPSS 0.30%Mattermost
CVE-2025-8023 Path Traversal in Template Upload Allows Uploading Files Outside Target Directory
CVSS 6.8 mediumEPSS 0.41%Mattermost
CVE-2025-47700 AI plugin APIs can be triggered using post actions
CVSS 3.5 lowEPSS 0.19%Mattermost
CVE-2025-49810 Thread summarization allows persistent access to channel
CVSS 3.5 lowEPSS 0.20%Mattermost
CVE-2025-36530 Import Path Traversal Enables Unauthorized Unsigned Plugin Installation
CVSS 6.8 mediumEPSS 0.49%Mattermost
CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 65.2%
CVE-2025-9288 Missing type checks leading to hash rewind and passing on crafted data
CVSS 9.1 criticalEPSS 0.74%Jira
CVE-2025-9287 Missing type checks leading to hash rewind and passing on crafted data
CVSS 9.1 criticalEPSS 0.55%Jira
CVE-2025-9074 Docker Desktop allows unauthenticated access to Docker Engine API from containers
CVSS 9.3 criticalEPSS 1.9%Docker
CVE-2025-55283 aiven-db-migrate allows Privilege Escalation through use of psql during migration
CVSS 9.1 criticalEPSS 0.62%Aiven
CVE-2025-55282 aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration
CVSS 9.1 criticalEPSS 0.72%Aiven
CVE-2025-54948 Trend Micro Apex One OS Command Injection Vulnerability
CVSS 9.4 criticalKEV added EPSS 25.4%
CVE-2025-8959 HashiCorp go-getter Vulnerable to Arbitrary Read through Symlink Attack
CVSS 7.5 highEPSS 0.57%HashiCorp
CVE-2025-8875 Insecure Deserialization Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2025-8876 Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 3.4%
CVE-2024-10219 Incorrect Authorization in GitLab
CVSS 6.5 mediumEPSS 0.45%GitLab
CVE-2024-12303 Incorrect Privilege Assignment in GitLab
CVSS 6.7 mediumEPSS 0.42%GitLab
CVE-2025-1477 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.49%GitLab
CVE-2025-2498 Insufficient Granularity of Access Control in GitLab
CVSS 3.1 lowEPSS 0.26%GitLab
CVE-2025-2614 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.39%GitLab
CVE-2025-2937 Inefficient Regular Expression Complexity in GitLab
CVSS 6.5 mediumEPSS 0.39%GitLab
CVE-2025-5819 Incorrect Permission Assignment for Critical Resource in GitLab
CVSS 5.0 mediumEPSS 0.27%GitLab
CVE-2025-8770 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 6.5 mediumEPSS 0.34%GitLab
CVSS 7.5 highEPSS 3.6%Fastly
CVE-2025-49457 Zoom Clients for Windows - Untrusted Search Path
CVSS 9.6 criticalEPSS 0.62%Zoom
CVE-2025-49456 Zoom Clients for Windows- Race Condition
CVSS 6.2 mediumEPSS 0.11%Zoom
CVE-2025-53793 Azure Stack Hub Information Disclosure Vulnerability
CVSS 7.5 highEPSS 1.3%Microsoft Azure
CVE-2025-53783 Microsoft Teams Remote Code Execution Vulnerability
CVSS 7.5 highEPSS 0.81%Microsoft Teams
CVE-2025-53765 Azure Stack Hub Information Disclosure Vulnerability
CVSS 4.4 mediumEPSS 0.49%Microsoft Azure
CVE-2025-53729 Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.30%Microsoft Azure
CVE-2025-8088 Path traversal vulnerability in WinRAR
CVSS 8.8 highKEV added EPSS 94.5%
CVE-2013-3893 Microsoft Internet Explorer Resource Management Errors Vulnerability
CVSS 8.8 highKEV added EPSS 87.6%
CVE-2007-0671 Microsoft Office Excel Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 43.2%
CVE-2025-8285 Unauthorized Channel Subscription Creation in Mattermost Confluence Plugin
CVSS 4.0 mediumEPSS 0.20%Mattermost
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)