RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-4972 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.37%GitLab
CVE-2025-6168 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.36%GitLab
CVE-2025-5777 NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
CVSS 7.5 highKEV added EPSS 100.0%
CVE-2025-53548 @clerk/backend Performs Insufficient Verification of Data Authenticity
CVSS 7.5 highEPSS 0.17%Clerk
CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability
CVSS 7.5 highEPSS 1.0%Microsoft Azure
CVE-2025-49737 Microsoft Teams Elevation of Privilege Vulnerability
CVSS 7.0 highEPSS 0.21%Microsoft Teams
CVE-2025-49731 Microsoft Teams Elevation of Privilege Vulnerability
CVSS 3.1 lowEPSS 0.48%Microsoft Teams
CVE-2025-21195 Azure Service Fabric Runtime Elevation of Privilege Vulnerability
CVSS 6.0 mediumEPSS 0.39%Microsoft Azure
CVE-2025-20323 Missing Access Control of Saved Searches in the Splunk Archiver app
CVSS 4.3 mediumEPSS 0.30%Splunk
CVE-2025-20319 Remote Command Execution through Scripted Input Files in Splunk Enterprise
CVSS 6.8 mediumEPSS 0.53%Splunk
CVE-2025-20324 Improper Access Control in System Source Types Configuration in Splunk Enterprise
CVSS 5.4 mediumEPSS 0.28%Splunk
CVE-2025-7259 Certain Queries with Duplicate _id Fields May Cause MongoDB Server to Crash
CVSS 6.5 mediumEPSS 0.35%MongoDB Atlas
CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling
CVSS 7.5 highEPSS 1.2%Redis
CVE-2025-32023 Redis allows out of bounds writes in hyperloglog commands leading to RCE
CVSS 7.0 highEPSS 6.5%Redis
CVE-2025-6712 MongoDB Server may be susceptible to DoS due to Accumulated Memory Allocation
CVSS 6.5 mediumEPSS 0.33%MongoDB Atlas
CVE-2025-6711 Incomplete Redaction of Sensitive Information in MongoDB Server Logs
CVSS 4.4 mediumEPSS 0.28%MongoDB Atlas
CVE-2025-3777 Improper Input Validation in huggingface/transformers
CVSS 3.5 lowEPSS 0.41%Hugging Face
CVE-2025-3264 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.50%Hugging Face
CVE-2025-3263 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.50%Hugging Face
CVE-2025-3262 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.49%Hugging Face
CVE-2019-9621 Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability
CVSS 7.5 highKEV added EPSS 81.0%
CVE-2019-5418 Rails Ruby on Rails Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 98.5%
CVE-2016-10033 PHPMailer Command Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.7%WordPress.com
CVE-2014-3931 Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 29.0%
CVE-2025-7074 vercel hyper rimraf-standalone.js ignoreMap redos
CVSS 4.3 mediumEPSS 0.68%Vercel
CVE-2025-49826 Next.js DoS vulnerability via cache poisoning
CVSS 7.5 highEPSS 1.1%Vercel
CVE-2025-49005 Next.js cache poisoning due to omission of Vary header
CVSS 3.7 lowEPSS 0.49%Vercel
CVE-2025-6587 Exposure of system environment variables in Docker Desktop diagnostic logs
CVSS 5.2 mediumEPSS 0.15%Docker
CVE-2025-34072 Anthropic Slack MCP Server Data Exfiltration via Link Unfurling
CVSS 9.3 criticalEPSS 0.43%Anthropic
CVE-2025-6554 Google Chromium V8 Type Confusion Vulnerability
CVSS 8.1 highKEV added EPSS 14.1%
CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability
CVSS 4.0 mediumKEV added EPSS 0.58%
CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability
CVSS 5.3 mediumKEV added EPSS 11.6%
CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service
CVSS 9.8 criticalKEV added EPSS 10.4%
CVSS 5.8 mediumEPSS 0.34%Akamai
CVSS 5.8 mediumEPSS 2.1%Akamai
CVE-2025-6707 Race condition in privilege cache invalidation cycle
CVSS 4.2 mediumEPSS 0.17%MongoDB Atlas
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)