RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-43706 Kibana Improper Authorization
CVSS 7.6 highEPSS 0.44%Elastic Cloud
CVSS 5.3 mediumEPSS 0.42%Salesforce
CVSS 9.1 criticalEPSS 0.49%Salesforce
CVSS 7.5 highEPSS 0.44%Salesforce
CVSS 7.5 highEPSS 0.44%Salesforce
CVSS 7.5 highEPSS 0.43%Salesforce
CVE-2025-24016 Remote code execution in Wazuh server
CVSS 9.9 criticalKEV added EPSS 93.8%
CVE-2025-32433 Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
CVSS 10.0 criticalKEV added EPSS 98.9%
CVE-2024-42009 RoundCube Webmail Cross-Site Scripting Vulnerability
CVSS 9.3 criticalKEV added EPSS 82.9%
CVE-2025-5419 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CVSS 8.8 highKEV added EPSS 7.8%
CVE-2025-48947 NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies
CVSS 7.7 highEPSS 0.43%Auth0
CVE-2024-31127 MacOS Zscaler Client Connector Local Privilege Escalation
CVSS 7.3 highEPSS 0.10%Zscaler
CVE-2025-48951 Auth0-PHP SDK Deserialization of Untrusted Data vulnerability
CVSS 9.3 criticalEPSS 0.75%Auth0
CVE-2025-21479 Incorrect Authorization in Graphics
CVSS 8.6 highKEV added EPSS 0.84%
CVE-2025-27038 Use After Free in Graphics
CVSS 7.5 highKEV added EPSS 1.1%
CVE-2025-21480 Incorrect Authorization in Graphics Windows
CVSS 8.6 highKEV added EPSS 0.46%
CVSS 5.0 mediumEPSS 0.46%Grafana Cloud
CVSS 8.3 highEPSS 0.56%Grafana Cloud
CVE-2025-3935 ScreenConnect Exposure to ASP.NET ViewState Code Injection
CVSS 8.1 highKEV added EPSS 3.6%
CVE-2025-35939 Craft CMS stores user-provided content in session files
CVSS 5.3 mediumKEV added EPSS 1.3%
CVE-2024-56145 RCE when PHP `register_argc_argv` config setting is enabled in craftcms/cms
CVSS 9.8 criticalKEV added EPSS 97.4%
CVE-2023-39780 ASUS RT-AX55 Routers OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 39.5%
CVE-2021-32030 ASUS Routers Improper Authentication Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.4%
CVE-2025-2571 Google OAuth Authentication Bypass for Converted Bot Accounts
CVSS 4.2 mediumEPSS 0.21%Mattermost
CVE-2025-1792 Improper Access Control in Mattermost Channel Member API
CVSS 3.1 lowEPSS 0.25%Mattermost
CVE-2025-48068 Information exposure in Next.js dev server due to lack of origin verification
CVSS 4.3 mediumEPSS 0.20%Vercel
CVE-2025-3913 Team Privacy Settings Authorization Bypass in Mattermost Server
CVSS 5.3 mediumEPSS 0.33%Mattermost
CVE-2025-27151 redis-check-aof may lead to stack overflow and potential RCE
CVSS 4.7 mediumEPSS 1.1%Redis
CVE-2024-52588 Strapi allows Server-Side Request Forgery in Webhook function
CVSS 4.9 mediumEPSS 0.59%Strapi Cloud
CVE-2025-48370 auth-js Vulnerable to Insecure Path Routing from Malformed User Input
CVSS 2.7 lowEPSS 0.90%Supabase
CVSS 5.5 mediumEPSS 0.48%Grafana Cloud
CVE-2024-7803 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.51%GitLab
CVE-2024-9163 User Interface (UI) Misrepresentation of Critical Information in GitLab
CVSS 3.5 lowEPSS 0.40%GitLab
CVE-2025-4366 Request Smuggling Vulnerability in Pingora
CVSS 6.1 mediumEPSS 0.54%Cloudflare
CVE-2024-12093 Improper Validation of Consistency within Input in GitLab
CVSS 6.8 mediumEPSS 0.47%GitLab
CVE-2025-0605 Weak Authentication in GitLab
CVSS 4.6 mediumEPSS 0.32%GitLab
CVE-2025-0679 Exposure of Private Personal Information to an Unauthorized Actor in GitLab
CVSS 4.3 mediumEPSS 0.33%GitLab
CVE-2025-0993 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 0.51%GitLab
CVE-2025-1110 Insufficient Granularity of Access Control in GitLab
CVSS 2.7 lowEPSS 0.32%GitLab
CVE-2025-2853 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.47%GitLab
CVE-2025-3111 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.47%GitLab
CVE-2025-4979 Insufficient Granularity of Access Control in GitLab
CVSS 4.9 mediumEPSS 0.44%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)