RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 8.5 highEPSS 0.49%SalesforceTableau
CVSS 8.5 highEPSS 0.29%SalesforceTableau
CVSS 8.1 highEPSS 0.42%SalesforceTableau
CVSS 8.1 highEPSS 0.42%SalesforceTableau
CVSS 8.0 highEPSS 0.27%SalesforceTableau
CVSS 3.7 lowEPSS 0.37%Akamai
CVSS 4.1 mediumEPSS 0.23%OpenAI
CVE-2025-0765 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.46%GitLab
CVE-2025-1299 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.38%GitLab
CVE-2025-4976 Exposure of Sensitive Information Due to Incompatible Policies in GitLab
CVSS 4.3 mediumEPSS 0.50%GitLab
CVE-2025-7001 Insufficient Granularity of Access Control in GitLab
CVSS 4.3 mediumEPSS 0.44%GitLab
CVSS 3.5 lowEPSS 0.32%Redis
CVSS 6.8 mediumEPSS 0.33%Okta
CVE-2025-6558 Google Chromium ANGLE and GPU Improper Input Validation Vulnerability
CVSS 8.8 highKEV added EPSS 10.9%
CVE-2025-54309 CrushFTP Unprotected Alternate Channel Vulnerability
CVSS 9.0 criticalKEV added EPSS 93.5%
CVE-2025-49706 Microsoft SharePoint Server Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 99.1%
CVE-2025-49704 Microsoft SharePoint Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 100.0%
CVE-2025-2776 SysAid On-Prem <= 23.3.40 serverurl Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 64.7%
CVE-2025-2775 SysAid On-Prem <= 23.3.40 Checkin Proceessing XML External Entity Injection
CVSS 9.3 criticalKEV added EPSS 42.6%
CVSS 7.5 highEPSS 0.89%Jira
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-47158 Azure DevOps Server Elevation of Privilege Vulnerability
CVSS 9.0 criticalEPSS 0.82%Microsoft Azure
CVE-2025-47995 Azure Machine Learning Elevation of Privilege Vulnerability
CVSS 6.5 mediumEPSS 0.78%Microsoft Azure
CVE-2025-49746 Azure Machine Learning Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.87%Microsoft Azure
CVE-2025-49747 Azure Machine Learning Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.81%Microsoft Azure
CVE-2025-6227 Invite token is used as part of the secure communication
CVSS 2.2 lowEPSS 0.22%Mattermost
CVE-2025-6233 Arbitrary file read by system admin via path traversal
CVSS 6.8 mediumEPSS 0.45%Mattermost
CVE-2025-6226 IDOR in CreatePost API allows for timeboxed message disclosure
CVSS 6.5 mediumEPSS 0.37%Mattermost
CVSS 4.2 mediumEPSS 70.1%Grafana Cloud
CVSS 7.6 highEPSS 57.7%Grafana Cloud
CVE-2025-25257 Fortinet FortiWeb SQL Injection Vulnerability
CVSS 9.6 criticalKEV added EPSS 99.9%
CVSS 4.3 mediumEPSS 1.1%Grafana Cloud
CVE-2025-53689 Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons
CVSS 8.8 highEPSS 0.54%Confluence
CVE-2025-47812 Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability
CVSS 10.0 criticalKEV added EPSS 93.9%
CVE-2025-3933 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.50%Hugging Face
CVE-2025-7021 OpenAI Operator - API Spoofing through Locking Operator on FullScreen
CVSS 6.5 mediumEPSS 0.36%OpenAI
CVE-2025-49464 Zoom Clients for Windows- Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.69%Zoom
CVE-2025-49463 Zoom Clients for iOS - Insufficient Control Flow Management
CVSS 6.5 mediumEPSS 0.49%Zoom
CVE-2025-49462 Zoom Clients - Cross-site Scripting
CVSS 3.5 lowEPSS 0.25%Zoom
CVE-2025-46789 Zoom Clients for Windows - Classic Buffer Overflow
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-46788 Zoom Workplace for Linux - Improper Certificate Validation
CVSS 7.4 highEPSS 0.28%Zoom
CVE-2025-3396 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.35%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)