RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-1194 Regular Expression Denial of Service (ReDoS) in huggingface/transformers
CVSS 4.3 mediumEPSS 0.48%Hugging Face
CVE-2025-46330 Snowflake Connector for C/C++ retries malformed requests
CVSS 3.3 lowEPSS 0.17%Snowflake
CVE-2025-31324 Missing Authorization check in SAP NetWeaver (Visual Composer development server)
CVSS 10.0 criticalKEV added EPSS 99.5%
CVE-2025-42599 Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 3.4%
CVE-2025-3928 Commvault Web Server unspecified vulnerability
CVSS 8.8 highKEV added EPSS 2.5%
CVE-2025-1976 Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6
CVSS 6.7 mediumKEV added EPSS 0.69%
CVSS 3.3 lowEPSS 0.16%Snowflake
CVE-2025-27820 Apache HttpComponents: PSL (Public Suffix List) validation bypass
CVSS 7.5 highEPSS 0.97%ConfluenceJira
CVE-2024-12244 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.31%GitLab
CVE-2025-0639 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.46%GitLab
CVE-2025-1908 Business Logic Errors in GitLab
CVSS 7.7 highEPSS 0.39%GitLab
CVE-2025-41423 Unauthorized Playbooks Post Deletion in Mattermost Playbooks Plugin
CVSS 3.1 lowEPSS 0.28%Mattermost
CVE-2025-35965 DoS in Mattermost Playbooks via Excessive Task Actions
CVSS 6.5 mediumEPSS 0.40%Mattermost
CVE-2025-41395 Webapp DoS via malicious retrospective post in Playbooks
CVSS 6.5 mediumEPSS 0.50%Mattermost
CVSS 6.8 mediumEPSS 16.0%Grafana Cloud
CVE-2025-2298 Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software
CVSS 8.4 highEPSS 0.36%Dremio
CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write Vulnerability
CVSS 9.8 criticalKEV added EPSS 14.0%
CVE-2025-31200 Apple Multiple Products Memory Corruption Vulnerability
CVSS 9.8 criticalKEV added EPSS 20.9%
CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability
CVSS 6.5 mediumKEV added EPSS 62.3%
CVE-2025-2564 Unauthorized View Access to Archived Channel Member Info
CVSS 4.3 mediumEPSS 0.29%Mattermost
CVE-2025-27936 Webhook Secret Exposure via Timing attack in MSteams plugin
CVSS 5.3 mediumEPSS 0.34%Mattermost
CVE-2025-31363 Data exfiltration via AI plugin Jira tool
CVSS 3.0 lowEPSS 0.29%Mattermost
CVE-2025-27571 Channel metadata visible in archived channels despite configuration setting
CVSS 4.3 mediumEPSS 0.27%Mattermost
CVE-2025-24839 Unauthorized AI bot activation via Wrangler plugin
CVSS 3.1 lowEPSS 0.23%Mattermost
CVE-2021-20035 SonicWall SMA100 Appliances OS Command Injection Vulnerability
CVSS 6.5 mediumKEV added EPSS 4.4%
CVE-2025-2475 Unauthorized Bot Login Using Credentials
CVSS 5.4 mediumEPSS 0.23%Mattermost
CVE-2025-2424 Leaked Metadata of Deleted Files via Bookmark Creation
CVSS 3.1 lowEPSS 0.26%Mattermost
CVE-2025-32093 Syatem admin profile modification by delegated granular administration role
CVSS 4.7 mediumEPSS 0.25%Mattermost
CVE-2025-1386 Query smuggling in ch-go library
CVSS 4.9 mediumEPSS 0.39%ClickHouse Cloud
CVE-2025-32382 Snowflake credentials logged by the Metabase backend
CVSS 1.8 lowEPSS 0.38%MetabaseMetabase Cloud
CVE-2025-0362 Improper Restriction of Rendered UI Layers or Frames in GitLab
CVSS 6.4 mediumEPSS 0.30%GitLab
CVE-2025-2469 Debug Messages Revealing Unnecessary Information in GitLab
CVSS 3.7 lowEPSS 0.39%GitLab
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)