RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2024-7296 Incorrect Authorization in GitLab
CVSS 2.7 lowEPSS 0.36%GitLab
CVE-2025-1257 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.46%GitLab
CVE-2024-12380 Generation of Error Message Containing Sensitive Information in GitLab
CVSS 4.4 mediumEPSS 0.57%GitLab
CVE-2024-13054 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.65%GitLab
CVE-2025-0652 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.42%GitLab
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
CVSS 10.0 criticalKEV added EPSS 3.8%
CVE-2025-21590 Junos OS: An local attacker with shell access can execute arbitrary code
CVSS 4.4 mediumKEV added EPSS 1.7%
CVE-2025-27407 Remote code execution when loading a crafted GraphQL schema
CVSS 9.1 criticalEPSS 3.1%GitLab
CVE-2025-27440 Zoom Apps - Heap-based Buffer Overflow
CVSS 8.5 highEPSS 0.45%Zoom
CVE-2025-27439 Zoom Apps - Buffer Underflow
CVSS 8.5 highEPSS 0.44%Zoom
CVE-2025-0151 Zoom Apps - Use After Free
CVSS 8.5 highEPSS 0.44%Zoom
CVE-2025-0150 Zoom Workplace Apps for iOS - Incorrect Behavior Order
CVSS 7.1 highEPSS 0.49%Zoom
CVE-2025-0149 Zoom Apps - Insufficient Verification of Data Authenticity
CVSS 6.5 mediumEPSS 0.25%Zoom
CVE-2025-26633 Microsoft Management Console Security Feature Bypass Vulnerability
CVSS 7.0 highKEV added EPSS 30.4%
CVE-2025-26627 Azure Arc Installer Elevation of Privilege Vulnerability
CVSS 7.0 highEPSS 0.90%Microsoft Azure
CVE-2025-24993 Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 2.2%
CVE-2025-24991 Windows NTFS Information Disclosure Vulnerability
CVSS 5.5 mediumKEV added EPSS 2.0%
CVE-2025-24985 Windows Fast FAT File System Driver Remote Code Execution Vulnerability
CVSS 7.8 highKEV added EPSS 3.9%
CVE-2025-24984 Windows NTFS Information Disclosure Vulnerability
CVSS 4.6 mediumKEV added EPSS 2.0%
CVE-2025-24983 Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVSS 7.0 highKEV added EPSS 1.9%
CVE-2025-24986 Azure Promptflow Remote Code Execution Vulnerability
CVSS 6.5 mediumEPSS 0.54%Microsoft Azure
CVE-2025-1296 Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs
CVSS 6.5 mediumEPSS 0.50%HashiCorp
CVE-2025-25181 Advantive VeraCore SQL Injection Vulnerability
CVSS 5.8 mediumKEV added EPSS 55.5%
CVE-2024-57968 Advantive VeraCore Unrestricted File Upload Vulnerability
CVSS 9.9 criticalKEV added EPSS 32.3%
CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 89.8%
CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 91.0%
CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2025-27152 Possible SSRF and Credential Leakage via Absolute URL in axios Requests
CVSS 5.3 mediumEPSS 0.79%Jira
CVE-2025-2045 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.28%GitLab
CVE-2025-1696 Exposure of Proxy Credentials in Docker Desktop Logs
CVSS 5.2 mediumEPSS 0.17%Docker
CVE-2025-1540 Incorrect Authorization in GitLab
CVSS 3.1 lowEPSS 0.24%GitLab
CVE-2025-25015 Kibana arbitrary code execution via prototype pollution
CVSS 9.9 criticalEPSS 1.3%Elastic Cloud
CVE-2025-22226 VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability
CVSS 7.1 highKEV added EPSS 1.6%
CVE-2025-22225 VMware ESXi Arbitrary Write Vulnerability
CVSS 8.2 highKEV added EPSS 1.0%
CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVSS 9.3 criticalKEV added EPSS 1.6%
CVE-2024-50302 HID: core: zero-initialize the report buffer
CVSS 5.5 mediumKEV added EPSS 0.81%
CVE-2024-10925 Authorization Bypass Through User-Controlled Key in GitLab
CVSS 5.3 mediumEPSS 0.34%GitLab
CVE-2024-4885 WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 99.3%
CVE-2023-20118 Cisco Small Business RV Series Routers Command Injection Vulnerability
CVSS 6.5 mediumKEV added EPSS 54.1%
CVE-2022-43939 Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
CVSS 8.6 highKEV added EPSS 92.3%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)