RewindexCVEs
CVEs
5,657 vulnerabilities, 1,762 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-21391 Windows Storage Elevation of Privilege Vulnerability
CVSS 7.1 highKEV added EPSS 2.3%
CVE-2025-21188 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability
CVSS 6.0 mediumEPSS 0.71%Microsoft Azure
CVE-2025-26495 Sensitive Data Exposure in Tableau Server
CVSS 7.5 highEPSS 0.34%SalesforceTableau
CVE-2025-26494 Server Side Request Forgery vulnerability in Tableau Server
CVSS 7.7 highEPSS 0.57%SalesforceTableau
CVSS 4.3 mediumEPSS 0.32%Jira
CVE-2024-40891 Zyxel DSL CPE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 22.9%
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability
CVSS 8.8 highKEV added EPSS 20.7%
CVE-2024-10649 Unauthenticated File Upload in wandb/openui
CVSS 6.1 mediumEPSS 0.29%Weights & Biases
CVE-2025-0994 Trimble Cityworks Deserialization Vulnerability
CVSS 8.8 highKEV added EPSS 31.3%
CVE-2025-1072 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.54%GitLab
CVE-2025-0982 Sandbox Escape in Google Cloud Application Integration's JavaScript Task (Rhino Engine)
CVSS 10.0 criticalEPSS 0.26%Google Cloud
CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability
CVSS 7.0 highKEV added EPSS 67.1%
CVE-2024-21413 Microsoft Outlook Remote Code Execution Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.7%
CVE-2022-23748 Dante Discovery Process Control Vulnerability
CVSS 7.8 highKEV added EPSS 8.3%
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVSS 9.8 criticalKEV added EPSS 4.7%
CVE-2020-15069 Sophos XG Firewall Buffer Overflow Vulnerability
CVSS 9.8 criticalKEV added EPSS 10.7%
CVE-2024-2878 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 7.5 highEPSS 19.7%GitLab
CVE-2024-3976 Missing Authorization in GitLab
CVSS 6.5 mediumEPSS 0.62%GitLab
CVE-2024-5528 Incomplete Comparison with Missing Factors in GitLab
CVSS 3.5 lowEPSS 0.41%GitLab
CVE-2024-9631 Inefficient Algorithmic Complexity in GitLab
CVSS 7.5 highEPSS 0.73%GitLab
CVE-2024-6356 Incorrect User Management in GitLab
CVSS 4.4 mediumEPSS 0.19%GitLab
CVE-2024-1539 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.35%GitLab
CVE-2023-6386 Allocation of Resources Without Limits or Throttling in GitLab
CVSS 6.5 mediumEPSS 0.53%GitLab
CVE-2024-53104 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format
CVSS 7.8 highKEV added EPSS 3.4%
CVSS 7.5 highEPSS 0.58%BitbucketConfluenceJira
CVE-2024-45195 Apache OFBiz: Confused controller-view authorization logic (forced browsing)
CVSS 9.8 criticalKEV added EPSS 100.0%
CVE-2024-29059 .NET Framework Information Disclosure Vulnerability
CVSS 7.5 highKEV added EPSS 98.6%
CVE-2018-9276 Paessler PRTG Network Monitor OS Command Injection Vulnerability
CVSS 7.2 highKEV added EPSS 87.0%
CVE-2018-19410 Paessler PRTG Network Monitor Local File Inclusion Vulnerability
CVSS 9.8 criticalKEV added EPSS 97.9%
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
CVSS 2.6 lowEPSS 0.17%Zoom
CVSS 4.3 mediumEPSS 0.41%Grafana Cloud
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
CVSS 2.6 lowEPSS 0.32%GitLab
CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab
CVSS 6.4 mediumEPSS 0.30%GitLab
CVE-2025-0147 Zoom Workplace App for Linux - Type Confusion
CVSS 8.8 highEPSS 0.61%Zoom
CVE-2025-0146 Zoom Workplace app for macOS - Symlink Following
CVSS 3.9 lowEPSS 0.23%Zoom
CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path
CVSS 4.6 mediumEPSS 0.21%Zoom
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write
CVSS 3.1 lowEPSS 0.34%Zoom
CVE-2025-0143 Zoom Workplace Apps for Linux - Out-of-bounds Write
CVSS 4.3 mediumEPSS 0.47%Zoom
CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
CVSS 4.3 mediumEPSS 0.27%Zoom
CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.94%Microsoft Azure
CVE-2025-0851 Path traversal issue in Deep Java Library
CVSS 9.8 criticalEPSS 23.3%Amazon Web Services
CVE-2025-24795 The Snowflake Connector for Python uses insecure cache files permissions
CVSS 4.4 mediumEPSS 0.14%Snowflake
CVE-2025-24793 Snowflake Connector for Python has an SQL Injection in write_pandas
CVSS 7.0 highEPSS 0.31%Snowflake
CVE-2025-24788 Snowflake Connector for .NET has weak temporary files permissions
CVSS 5.0 mediumEPSS 0.14%Snowflake
CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions
CVSS 4.4 mediumEPSS 0.19%Snowflake
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)