RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-11129 Generation of Error Message Containing Sensitive Information in GitLab
CVSS 6.3 mediumEPSS 0.37%GitLab
CVE-2025-1677 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.42%GitLab
CVE-2025-2408 Insufficient Granularity of Access Control in GitLab
CVSS 5.3 mediumEPSS 0.34%GitLab
CVE-2024-53197 ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
CVSS 7.8 highKEV added EPSS 4.1%
CVE-2024-53150 ALSA: usb-audio: Fix out of bounds reads when finding clock sources
CVSS 7.1 highKEV added EPSS 1.4%
CVE-2025-25013 Elastic Defend Insertion of Sensitive Information into Log Files
CVSS 6.5 mediumEPSS 0.36%Elastic Cloud
CVE-2024-12556 Kibana Prototype Pollution can lead to code injection
CVSS 8.7 highEPSS 0.55%Elastic Cloud
CVE-2025-27489 Azure Local Elevation of Privilege Vulnerability
CVSS 7.8 highEPSS 0.61%Microsoft Azure
CVE-2025-26628 Azure Local Cluster Information Disclosure Vulnerability
CVSS 7.3 highEPSS 1.4%Microsoft Azure
CVE-2025-25002 Azure Local Cluster Information Disclosure Vulnerability
CVSS 6.8 mediumEPSS 1.1%Microsoft Azure
CVE-2025-29824 Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 19.3%
CVSS 4.9 mediumEPSS 0.58%Elastic Cloud
CVSS 6.5 mediumEPSS 0.41%Elastic Cloud
CVE-2024-52980 Elasticsearch Uncontrolled Resource Consumption vulnerability
CVSS 6.5 mediumEPSS 0.55%Elastic Cloud
CVE-2025-30671 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.41%Zoom
CVE-2025-30670 Zoom Workplace Apps for Windows - Null Pointer
CVSS 6.5 mediumEPSS 0.42%Zoom
CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization
CVSS 2.8 lowEPSS 0.16%Zoom
CVE-2025-27442 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.24%Zoom
CVE-2025-27441 Zoom Workplace Apps - Cross Site Scripting
CVSS 4.6 mediumEPSS 0.25%Zoom
CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
CVSS 9.0 criticalKEV added EPSS 94.3%
CVE-2025-31496 apollo-compiler Named Fragment Processing Vulnerability
CVSS 7.5 highEPSS 0.43%Apollo GraphQL
CVE-2025-31161 CrushFTP Authentication Bypass Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-32250 WordPress Rollbar plugin <= 2.7.1 - Cross Site Request Forgery (CSRF) vulnerability
CVSS 5.4 mediumEPSS 0.21%Rollbar
CVE-2025-31480 aiven-extras allows PostgreSQL Privilege Escalation through format function
CVSS 9.1 criticalEPSS 0.50%Aiven
CVE-2025-22457 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2025-30218 Next.js may leak x-middleware-subrequest-id to external hosts
CVSS 5.9 mediumEPSS 0.43%Vercel
CVE-2025-3084 MongoDB Server may crash due to improper validation of explain command
CVSS 6.5 mediumEPSS 0.41%MongoDB Atlas
CVE-2025-3083 Malformed MongoDB wire protocol messages may cause mongos to crash
CVSS 7.5 highEPSS 0.45%MongoDB Atlas
CVE-2025-24813 Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
CVSS 10.0 criticalKEV added EPSS 99.9%
CVE-2025-21384 Azure Health Bot Elevation of Privilege Vulnerability
CVSS 8.3 highEPSS 0.70%Microsoft Azure
CVE-2025-26683 Azure Playwright Elevation of Privilege Vulnerability
CVSS 8.1 highEPSS 0.69%Microsoft Azure
CVE-2025-3048 Path Traversal in AWS SAM CLI allows file copy to local cache
CVSS 6.5 mediumEPSS 0.67%Amazon Web Services
CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container
CVSS 6.5 mediumEPSS 0.78%Amazon Web Services
CVE-2024-20439 Cisco Smart Licensing Utility Static Credential Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.1%
CVE-2024-10307 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 4.3 mediumEPSS 0.26%GitLab
CVE-2024-12619 Insufficient Granularity of Access Control in GitLab
CVSS 5.2 mediumEPSS 0.27%GitLab
CVE-2025-2888 Improper timestamp caching during snapshot rollback in tough
CVSS 4.5 mediumEPSS 0.33%Amazon Web Services
CVE-2025-2887 Failure to detect delegated target rollback in tough
CVSS 4.5 mediumEPSS 0.33%Amazon Web Services
CVE-2025-2886 Terminating targets role delegations are not respected in tough
CVSS 4.5 mediumEPSS 0.33%Amazon Web Services
CVE-2025-2885 Root metadata version not validated in tough
CVSS 4.5 mediumEPSS 0.33%Amazon Web Services
CVSS 7.5 highEPSS 2.3%Confluence
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)