RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-53910 Unauthorized Channel Subscription Edit in Mattermost Confluence Plugin
CVSS 4.0 mediumEPSS 0.20%Mattermost
CVE-2025-44001 Unauthorized Channel Subscription Read in Mattermost Confluence Plugin
CVSS 4.0 mediumEPSS 0.21%Mattermost
CVE-2025-55008 AuthKit React Router: Sensitive auth data rendered in HTML
CVSS 7.1 highEPSS 0.39%WorkOS
CVE-2025-55009 AuthKit: Sensitive auth data rendered in HTML
CVSS 7.1 highEPSS 0.39%WorkOS
CVE-2025-53767 Azure OpenAI Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.1%Microsoft Azure
CVE-2025-53792 Azure Portal Elevation of Privilege Vulnerability
CVSS 9.1 criticalEPSS 0.84%Microsoft Azure
CVE-2025-7054 Infinite loop triggered by connection ID retirement
CVSS 6.5 mediumEPSS 0.45%Cloudflare
CVSS 4.0 mediumEPSS 0.58%Akamai
CVE-2025-5197 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.42%Hugging Face
CVE-2025-6013 Vault LDAP MFA Enforcement Bypass When Using Username As Alias
CVSS 6.5 mediumEPSS 0.53%HashiCorp
CVE-2025-54982 SAML 2.0 Public Key Validation Issue
CVSS 9.6 criticalEPSS 0.41%Zscaler
CVE-2022-40799 D-Link DNR-322L Download of Code Without Integrity Check Vulnerability
CVSS 8.8 highKEV added EPSS 33.6%
CVE-2020-25079 D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 54.0%
CVE-2020-25078 D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability
CVSS 7.5 highKEV added EPSS 97.5%
CVE-2025-54130 Cursor Agent is vulnerable prompt injection via Editor Special Files
CVSS 7.5 highEPSS 0.33%Cursor
CVE-2025-54135 Cursor Agent is vulnerable to prompt injection via MCP Special Files
CVSS 8.6 highEPSS 2.1%Cursor
CVE-2025-8341 SSRF in Infinity Datasource Plugin
CVSS 5.0 mediumEPSS 0.34%Grafana Cloud
CVE-2025-54136 Cursor's Modification of MCP Server Definitions Bypasses Manual Re-approvals
CVSS 7.2 highEPSS 28.5%Cursor
CVE-2025-54133 Cursor's MCP Install Deeplink Does Not Show Arguments in its User-Dialog
CVSS 9.6 criticalEPSS 0.41%Cursor
CVE-2025-54132 Cursor's Mermaid Diagram Tool is Vulnerable to an Arbitrary Image Fetch
CVSS 4.4 mediumEPSS 0.38%Cursor
CVE-2025-54131 Cursor bypasses its allow list to execute arbitrary commands
CVSS 6.4 mediumEPSS 0.51%Cursor
CVE-2025-6015 Vault Login MFA Bypass of Rate Limiting and TOTP Code Reuse
CVSS 5.7 mediumEPSS 0.35%HashiCorp
CVE-2025-6011 Timing Side-Channel in Vault’s Userpass Auth Method
CVSS 3.7 lowEPSS 0.36%HashiCorp
CVE-2025-6004 Vault Userpass and LDAP User Lockout Bypass
CVSS 5.3 mediumEPSS 0.45%HashiCorp
CVE-2025-6037 Vault Certificate Auth Method Did Not Validate Common Name For Non-CA Certificates
CVSS 6.8 mediumEPSS 0.26%HashiCorp
CVE-2025-6014 Vault TOTP Secrets Engine Code Reuse
CVSS 6.5 mediumEPSS 0.42%HashiCorp
CVE-2025-6000 Arbitrary Remote Code Execution via Plugin Catalog Abuse
CVSS 9.1 criticalEPSS 0.95%HashiCorp
CVE-2025-5999 Vault Root Namespace Operator May Elevate Token Privileges
CVSS 7.2 highEPSS 0.51%HashiCorp
CVSS 7.3 highEPSS 0.20%Couchbase
CVE-2025-8279 Missing Authentication for Critical Function in GitLab Language Server
CVSS 8.7 highEPSS 0.46%GitLab
CVE-2025-20337 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 74.5%
CVE-2025-20281 Cisco ISE API Unauthenticated Remote Code Execution Vulnerability
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2023-2533 PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF
CVSS 8.4 highKEV added EPSS 28.8%
CVE-2025-5120 Sandbox Escape Vulnerability in huggingface/smolagents
CVSS 7.6 highEPSS 31.2%Hugging Face
CVSS 5.3 mediumEPSS 0.37%SalesforceTableau
CVSS 8.2 highEPSS 0.34%SalesforceTableau
CVSS 8.2 highEPSS 0.34%SalesforceTableau
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)