RewindexCVEs
CVEs
5,638 vulnerabilities, 1,760 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVSS 7.6 highEPSS 97.1%Grafana Cloud
CVE-2025-4632 Samsung MagicINFO 9 Server Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 24.1%
CVE-2025-48069 ejson2env has insufficient input sanitization
CVSS 6.6 mediumEPSS 1.4%Shopify
CVSS 8.8 highEPSS 0.69%Jira
CVE-2025-2099 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 5.3 mediumEPSS 0.61%Hugging Face
CVE-2025-4428 Remote Code Execution
CVSS 7.2 highKEV added EPSS 88.0%
CVE-2025-4427 Authentication Bypass
CVSS 5.3 mediumKEV added EPSS 99.9%
CVE-2025-27920 Srimax Output Messenger Directory Traversal Vulnerability
CVSS 7.2 highKEV added EPSS 1.9%
CVE-2024-27443 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 6.1 mediumKEV added EPSS 24.6%
CVE-2024-11182 Stored XSS vulnerability in MDaemon Email Server
CVSS 6.1 mediumKEV added EPSS 33.3%
CVE-2023-38950 ZKTeco BioTime Path Traversal Vulnerability
CVSS 7.5 highKEV added EPSS 92.5%
CVE-2025-47275 Brute Force Authentication Tags of CookieStore Sessions in Auth0-PHP SDK
CVSS 9.1 criticalEPSS 0.54%Auth0
CVE-2025-2527 Improper access control to group information
CVSS 4.3 mediumEPSS 0.31%Mattermost
CVE-2025-3446 Members Without Guest Invite Permissions Can Add Guests to Teams
CVSS 4.3 mediumEPSS 0.26%Mattermost
CVE-2025-31947 Repeated LDAP login failures can lock an LDAP account
CVSS 5.8 mediumEPSS 0.35%Mattermost
CVE-2025-42999 Insecure Deserialization in SAP NetWeaver (Visual Composer development server)
CVSS 9.1 criticalKEV added EPSS 12.9%
CVE-2024-12987 DrayTek Vigor2960/Vigor300B Web Management Interface apmcfgupload os command injection
CVSS 7.3 highKEV added EPSS 98.2%
CVE-2025-32421 Next.js Race Condition to Cache Poisoning
CVSS 3.7 lowEPSS 0.81%Vercel
CVE-2025-46786 Zoom Workplace Apps - Cross-site Scripting
CVSS 4.3 mediumEPSS 0.31%Zoom
CVE-2025-46785 Zoom Workplace Apps for Windows - Buffer Over-read
CVSS 6.5 mediumEPSS 0.58%Zoom
CVE-2025-30668 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30667 Zoom Workplace Apps - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30666 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30665 Zoom Workplace Apps for Windows - NULL Pointer Dereference
CVSS 6.5 mediumEPSS 0.55%Zoom
CVE-2025-30664 Zoom Workplace Apps - Cross-site Scripting
CVSS 6.6 mediumEPSS 0.27%Zoom
CVE-2025-30663 Zoom Workplace Apps - Time-of-check Time-of-use
CVSS 8.8 highEPSS 0.15%Zoom
CVE-2025-32756 Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
CVSS 9.6 criticalKEV added EPSS 30.9%
CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 27.3%
CVE-2025-32709 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.8%
CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.3%
CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2025-30400 Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2025-30387 Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 1.2%Microsoft Azure
CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVSS 7.0 highEPSS 0.31%Microsoft Azure
CVE-2025-4658 Authentication Bypass in OPKSSH
CVSS 9.8 criticalEPSS 0.34%Cloudflare
CVE-2025-3757 Authentication Bypass in OpenPubKey
CVSS 9.8 criticalEPSS 0.43%Cloudflare
CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability
CVSS 1.9 lowKEV added EPSS 0.45%
CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.41%GitLab
CVE-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab
CVSS 6.8 mediumEPSS 0.46%GitLab
CVE-2025-1278 Insufficient Granularity of Access Control in GitLab
CVSS 5.3 mediumEPSS 0.39%GitLab
CVSS 7.1 highEPSS 0.16%Retool
CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.8%Microsoft Azure
CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 1.7%Microsoft Azure
CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability
CVSS 9.9 criticalEPSS 3.5%Microsoft Azure
CVE-2025-46812 Trix vulnerable to Cross-site Scripting on copy & paste
CVSS 2.0 lowEPSS 0.72%Basecamp
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)