RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2018-8639 Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability
CVSS 8.4 highKEV added EPSS 22.2%
CVE-2025-1692 MongoDB Shell may be susceptible to control character injection via pasting
CVSS 6.3 mediumEPSS 0.28%MongoDB Atlas
CVE-2024-27239 Zoom Workplace Apps and SDKs - Divide By Zero
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-27246 Zoom Workplace Apps and SDKs - Use After Free
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-27245 Zoom Workplace Apps and SDKs - Buffer Overflow
CVSS 4.3 mediumEPSS 0.64%Zoom
CVE-2024-45421 Zoom Apps - Buffer Overflow
CVSS 8.5 highEPSS 0.61%Zoom
CVE-2024-45418 Zoom Apps for macOS - Symbolic Link Following
CVSS 5.4 mediumEPSS 0.48%Zoom
CVE-2024-45417 Zoom Apps for macOS - Uncontrolled Resource Consumption
CVSS 6.0 mediumEPSS 0.19%Zoom
CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment
CVSS 4.9 mediumEPSS 0.32%Zoom
CVE-2024-45425 Zoom Workplace Apps - Incorrect User Management
CVSS 4.9 mediumEPSS 0.32%Zoom
CVE-2024-45424 Zoom Workplace Apps - Business Logic Error
CVSS 5.3 mediumEPSS 0.37%Zoom
CVE-2024-49035 Partner.Microsoft.Com Elevation of Privilege Vulnerability
CVSS 8.7 highKEV added EPSS 1.3%
CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability
CVSS 9.0 criticalKEV added EPSS 77.3%
CVE-2025-20051 Arbitrary file read via block duplication in Mattermost Boards
CVSS 9.9 criticalEPSS 0.61%Mattermost
CVE-2025-24490 SQL Injection in Mattermost Boards via board category ID reordering
CVSS 9.6 criticalEPSS 0.51%Mattermost
CVE-2025-25279 Arbitrary file read in Mattermost Boards via import & export board archive
CVSS 9.9 criticalEPSS 24.2%Mattermost
CVE-2025-1412 Session Persistence After User-to-Bot Conversion
CVSS 3.1 lowEPSS 0.26%Mattermost
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability
CVSS 8.8 highKEV added EPSS 3.9%
CVE-2017-3066 Adobe ColdFusion Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 90.6%
CVSS 6.0 mediumEPSS 0.34%WorkOS
CVE-2025-24989 Microsoft Power Pages Elevation of Privilege Vulnerability
CVSS 8.2 highKEV added EPSS 1.6%
CVE-2025-23209 Potential RCE with a compromised security key in craft/cms
CVSS 8.1 highKEV added EPSS 21.6%
CVE-2025-0111 PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface
CVSS 6.5 mediumKEV added EPSS 2.0%
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface
CVSS 9.1 criticalKEV added EPSS 98.1%
CVE-2024-53704 SonicWall SonicOS SSLVPN Improper Authentication Vulnerability
CVSS 8.2 highKEV added EPSS 95.3%
CVE-2025-0503 Leaked User IDs and Metadata of Deleted DMs
CVSS 3.1 lowEPSS 0.25%Mattermost
CVE-2024-3303 Improper Neutralization of Input Used for LLM Prompting in GitLab
CVSS 6.4 mediumEPSS 0.40%GitLab
CVE-2024-57727 SimpleHelp Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 96.8%
CVE-2025-1198 Insufficient Session Expiration in GitLab
CVSS 4.2 mediumEPSS 0.27%GitLab
CVE-2024-7102 Execution with Unnecessary Privileges in GitLab
CVSS 9.6 criticalEPSS 0.51%GitLab
CVE-2024-8266 Execution with Unnecessary Privileges in GitLab
CVSS 4.4 mediumEPSS 0.44%GitLab
CVE-2025-1146 CrowdStrike Falcon Sensor for Linux TLS Issue
CVSS 8.1 highEPSS 0.26%CrowdStrike
CVE-2024-9870 Unintended Proxy or Intermediary ('Confused Deputy') in GitLab
CVSS 4.3 mediumEPSS 0.39%GitLab
CVE-2025-0516 Incorrect Authorization in GitLab
CVSS 4.3 mediumEPSS 0.30%GitLab
CVE-2024-12379 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.51%GitLab
CVE-2025-1212 Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
CVSS 4.3 mediumEPSS 0.40%GitLab
CVE-2025-1042 Files or Directories Accessible to External Parties in GitLab
CVSS 4.9 mediumEPSS 0.43%GitLab
CVE-2025-24200 Apple iOS and iPadOS Incorrect Authorization Vulnerability
CVSS 6.1 mediumKEV added EPSS 4.5%
CVE-2024-41710 Mitel SIP Phones Argument Injection Vulnerability
CVSS 6.8 mediumKEV added EPSS 41.6%
CVE-2025-1243 Field in api-go proxy not transformed before version 1.44.1
CVSS 2.0 lowEPSS 0.09%Temporal Cloud
CVE-2025-21418 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 2.1%
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)