RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-1754 Missing Authentication for Critical Function in GitLab
CVSS 5.3 mediumEPSS 0.30%GitLab
CVE-2025-2938 Business Logic Errors in GitLab
CVSS 3.1 lowEPSS 0.31%GitLab
CVE-2025-3279 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.37%GitLab
CVE-2025-5315 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.26%GitLab
CVE-2025-5846 Missing Authorization in GitLab
CVSS 2.7 lowEPSS 0.27%GitLab
CVE-2025-4656 Vault Vulnerable to Recovery Key Cancellation Denial of Service
CVSS 3.1 lowEPSS 0.27%HashiCorp
CVE-2025-25012 Kibana Open Redirect
CVSS 4.3 mediumEPSS 0.44%Elastic Cloud
CVE-2024-54085 Redfish Authentication Bypass
CVSS 9.8 criticalKEV added EPSS 60.7%
CVE-2024-0769 D-Link DIR-859 HTTP POST Request hedwig.cgi path traversal
CVSS 5.3 mediumKEV added EPSS 82.7%
CVE-2019-6693 Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
CVSS 6.5 mediumKEV added EPSS 6.6%
CVSS 4.2 mediumEPSS 0.24%Sentry
CVE-2023-5600 Missing Authorization in GitLab
CVSS 3.1 lowEPSS 0.27%GitLab
CVE-2024-4994 Cross-Site Request Forgery (CSRF) in GitLab
CVSS 8.1 highEPSS 0.39%GitLab
CVE-2024-4025 Inefficient Regular Expression Complexity in GitLab
CVSS 6.5 mediumEPSS 0.55%GitLab
CVE-2025-5121 Missing Authorization in GitLab
CVSS 8.5 highEPSS 12.4%GitLab
CVE-2025-50010 WordPress Zapier for WordPress plugin <= 1.5.2 - Broken Access Control Vulnerability
CVSS 5.4 mediumEPSS 0.26%Zapier
CVE-2025-3228 Unauthorized Guest user access to Playbook
CVSS 4.3 mediumEPSS 0.29%Mattermost
CVE-2025-3227 Unauthorized channel member management through playbook runs
CVSS 4.3 mediumEPSS 0.25%Mattermost
CVE-2024-7586 Insertion of Sensitive Information into Log File in GitLab
CVSS 4.1 mediumEPSS 0.31%GitLab
CVE-2025-4981 Path Traversal Leading to RCE by Any Authenticated Mattermost User
CVSS 9.9 criticalEPSS 1.0%Mattermost
CVE-2025-52467 pgai secrets exfiltration via `pull_request_target`
CVSS 9.1 criticalEPSS 0.40%Timescale (Tiger Data)
CVE-2025-4821 Incorrect congestion window growth by invalid ACK ranges
CVSS 7.5 highEPSS 0.94%Cloudflare
CVE-2025-4820 Incorrect congestion window growth by optimistic ACK
CVSS 5.3 mediumEPSS 0.86%Cloudflare
CVSS 4.9 mediumEPSS 0.23%Couchbase
CVE-2023-0386 Linux Kernel Improper Ownership Management Vulnerability
CVSS 7.8 highKEV added EPSS 7.9%
CVE-2025-43200 Apple Multiple Products Unspecified Vulnerability
CVSS 4.2 mediumKEV added EPSS 1.2%
CVE-2025-6087 SSRF vulnerability in opennextjs-cloudflare via /_next/image endpoint
CVSS 9.1 criticalEPSS 0.97%Cloudflare
CVE-2023-33538 TP-Link Multiple Routers Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 41.6%
CVE-2025-5982 Insufficient Granularity of Access Control in GitLab
CVSS 3.7 lowEPSS 0.31%GitLab
CVE-2024-9512 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
CVSS 5.3 mediumEPSS 0.25%GitLab
CVE-2025-0673 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
CVSS 7.5 highEPSS 0.55%GitLab
CVE-2025-5195 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 4.3 mediumEPSS 0.30%GitLab
CVE-2025-1478 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.43%GitLab
CVE-2025-1516 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.43%GitLab
CVE-2025-5996 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.78%GitLab
CVE-2025-4922 Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job
CVSS 8.1 highEPSS 0.51%HashiCorp
CVE-2025-4128 Mattermost Guest User Information Disclosure Vulnerability
CVSS 3.1 lowEPSS 0.22%Mattermost
CVE-2025-4573 LDAP Injection in Mattermost Enterprise Edition When Using Active Directory
CVSS 4.1 mediumEPSS 0.28%Mattermost
CVE-2025-33053 Internet Shortcut Files Remote Code Execution Vulnerability
CVSS 8.8 highKEV added EPSS 87.0%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)