RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-30397 Scripting Engine Memory Corruption Vulnerability
CVSS 7.5 highKEV added EPSS 27.3%
CVE-2025-32709 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.8%
CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.3%
CVE-2025-32701 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2025-30400 Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.9%
CVE-2025-30387 Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 1.2%Microsoft Azure
CVE-2025-29973 Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVSS 7.0 highEPSS 0.31%Microsoft Azure
CVE-2025-4658 Authentication Bypass in OPKSSH
CVSS 9.8 criticalEPSS 0.34%Cloudflare
CVE-2025-3757 Authentication Bypass in OpenPubKey
CVSS 9.8 criticalEPSS 0.43%Cloudflare
CVE-2025-47729 TeleMessage TM SGNL Hidden Functionality Vulnerability
CVSS 1.9 lowKEV added EPSS 0.45%
CVE-2024-8973 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.41%GitLab
CVE-2025-0549 Authentication Bypass Using an Alternate Path or Channel in GitLab
CVSS 6.8 mediumEPSS 0.46%GitLab
CVE-2025-1278 Insufficient Granularity of Access Control in GitLab
CVSS 5.3 mediumEPSS 0.39%GitLab
CVSS 7.1 highEPSS 0.16%Retool
CVE-2025-29813 Azure DevOps Elevation of Privilege Vulnerability
CVSS 10.0 criticalEPSS 1.8%Microsoft Azure
CVE-2025-29827 Azure Automation Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 1.7%Microsoft Azure
CVE-2025-29972 Azure Storage Resource Provider Spoofing Vulnerability
CVSS 9.9 criticalEPSS 3.5%Microsoft Azure
CVE-2025-46812 Trix vulnerable to Cross-site Scripting on copy & paste
CVSS 2.0 lowEPSS 0.72%Basecamp
CVE-2024-6047 GeoVision EOL device - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 10.1%
CVE-2024-11120 GeoVision EOL devices - OS Command Injection
CVSS 9.8 criticalKEV added EPSS 28.4%
CVE-2025-46573 passport-wsfed-saml2 Has SAML Authentication Bypass via Attribute Smuggling
CVSS 8.6 highEPSS 0.37%Auth0
CVE-2025-46572 passport-wsfed-saml2 Has SAML Authentication Bypass via Signature Wrapping
CVSS 9.3 criticalEPSS 0.42%Auth0
CVE-2025-25014 Kibana arbitrary code execution via prototype pollution
CVSS 9.1 criticalEPSS 22.3%Elastic Cloud
CVE-2025-37730 Logstash Improper Certificate Validation in TCP output
CVSS 6.5 mediumEPSS 0.18%Elastic Cloud
CVE-2025-4374 Quay: incorrect privilege assignment
CVSS 6.5 mediumEPSS 0.34%Red Hat (incl. Quay.io)
CVE-2025-27363 FreeType Out-of-Bounds Write Vulnerability
CVSS 8.1 highKEV added EPSS 27.8%
CVE-2025-3248 Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-46332 Information Disclosure via Flags override link
CVSS 6.5 mediumEPSS 0.33%Vercel
CVE-2025-4166 Vault May Include Sensitive Data in Error Logs When Using the KV v2 Plugin
CVSS 4.5 mediumEPSS 0.45%HashiCorp
CVE-2025-34028 Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal
CVSS 10.0 criticalKEV added EPSS 97.6%
CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path Vulnerability
CVSS 9.0 criticalKEV added EPSS 87.8%
CVE-2024-52979 Elasticsearch Uncontrolled Resource Consumption vulnerability
CVSS 6.5 mediumEPSS 0.65%Elastic Cloud
CVE-2024-11390 Kibana Unrestricted Upload of File with Dangerous Type Can Lead to XSS
CVSS 5.4 mediumEPSS 0.35%Elastic Cloud
CVE-2025-25016 Kibana Unrestricted Upload of File
CVSS 4.3 mediumEPSS 0.34%Elastic Cloud
CVE-2024-11994 APM Server Insertion of Sensitive Information into Log File
CVSS 5.7 mediumEPSS 0.26%Elastic Cloud
CVE-2024-52976 Elastic Agent Inclusion of Functionality from Untrusted Control Sphere
CVSS 4.4 mediumEPSS 0.20%Elastic Cloud
CVE-2023-46669 Elastic Agent / Elastic Endpoint Security local API key disclosure
CVSS 6.2 mediumEPSS 0.20%Elastic Cloud
CVE-2024-38475 Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
CVSS 9.1 criticalKEV added EPSS 100.0%
CVE-2023-44221 SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 76.2%
CVE-2025-4144 PKCE bypass via downgrade attack
CVSS 9.8 criticalEPSS 0.57%Cloudflare
CVE-2025-4143 Missing validation of redirect_uri on authorize endpoint
CVSS 6.1 mediumEPSS 0.32%Cloudflare
CVE-2025-21416 Azure Virtual Desktop Elevation of Privilege Vulnerability
CVSS 8.5 highEPSS 0.78%Microsoft Azure
CVE-2025-30392 Azure AI Bot Elevation of Privilege Vulnerability
CVSS 9.8 criticalEPSS 1.1%Microsoft Azure
CVE-2025-30390 Azure ML Compute Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.97%Microsoft Azure
CVE-2025-33074 Azure Functions Remote Code Execution Vulnerability
CVSS 7.5 highEPSS 0.58%Microsoft Azure
CVE-2025-30389 Azure Bot Framework SDK Elevation of Privilege Vulnerability
CVSS 8.7 highEPSS 0.88%Microsoft Azure
CVSS 7.6 highEPSS 0.48%Couchbase
CVE-2025-46344 Auth0 NextJS SDK v4 Missing Session Invalidation
CVSS 4.9 mediumEPSS 0.43%Auth0
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)