RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-0148 Zoom Jenkins Marketplace plugin - Missing Password Field Masking
CVSS 2.6 lowEPSS 0.17%Zoom
CVSS 4.3 mediumEPSS 0.41%Grafana Cloud
CVE-2023-6195 Server-Side Request Forgery (SSRF) in GitLab
CVSS 2.6 lowEPSS 0.32%GitLab
CVE-2024-1211 Cross-Site Request Forgery (CSRF) in GitLab
CVSS 6.4 mediumEPSS 0.30%GitLab
CVE-2025-0147 Zoom Workplace App for Linux - Type Confusion
CVSS 8.8 highEPSS 0.61%Zoom
CVE-2025-0146 Zoom Workplace app for macOS - Symlink Following
CVSS 3.9 lowEPSS 0.23%Zoom
CVE-2025-0145 Zoom Workplace Apps for Windows - Untrusted Search Path
CVSS 4.6 mediumEPSS 0.21%Zoom
CVE-2025-0144 Zoom Workplace Apps - Out-of-bounds Write
CVSS 3.1 lowEPSS 0.34%Zoom
CVE-2025-0143 Zoom Workplace Apps for Linux - Out-of-bounds Write
CVSS 4.3 mediumEPSS 0.47%Zoom
CVE-2025-0142 Zoom Jenkins Marketplace plugin - Cleartext Storage of Sensitive Information
CVSS 4.3 mediumEPSS 0.27%Zoom
CVE-2025-21415 Azure AI Face Service Elevation of Privilege Vulnerability
CVSS 9.9 criticalEPSS 0.94%Microsoft Azure
CVE-2025-0851 Path traversal issue in Deep Java Library
CVSS 9.8 criticalEPSS 23.3%Amazon Web Services
CVE-2025-24795 The Snowflake Connector for Python uses insecure cache files permissions
CVSS 4.4 mediumEPSS 0.14%Snowflake
CVE-2025-24793 Snowflake Connector for Python has an SQL Injection in write_pandas
CVSS 7.0 highEPSS 0.31%Snowflake
CVE-2025-24788 Snowflake Connector for .NET has weak temporary files permissions
CVSS 5.0 mediumEPSS 0.14%Snowflake
CVE-2025-24790 Snowflake JDBC uses insecure temporary credential cache file permissions
CVSS 4.4 mediumEPSS 0.19%Snowflake
CVE-2025-24789 Snowflake JDBC allows an untrusted search path on Windows
CVSS 7.8 highEPSS 0.26%Snowflake
CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability
CVSS 10.0 criticalKEV added EPSS 17.5%
CVSS 8.0 highEPSS 0.35%Akamai
CVE-2025-0290 Loop with Unreachable Exit Condition ('Infinite Loop') in GitLab
CVSS 4.3 mediumEPSS 0.37%GitLab
CVSS 6.5 mediumEPSS 0.34%Couchbase
CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability
CVSS 9.8 criticalKEV added EPSS 26.6%
CVE-2024-11931 Insufficient Granularity of Access Control in GitLab
CVSS 6.4 mediumEPSS 0.32%GitLab
CVSS 6.5 mediumEPSS 0.40%Elastic Cloud
CVE-2024-52975 Fleet Server sensitive information exposure via logs
CVSS 9.0 criticalEPSS 0.27%Elastic Cloud
CVE-2024-52972 Kibana allocation of resources without limits or throttling leads to crash
CVSS 6.5 mediumEPSS 0.40%Elastic Cloud
CVE-2024-43707 Kibana exposure of sensitive information to an unauthorized actor
CVSS 7.7 highEPSS 0.42%Elastic Cloud
CVE-2024-43710 Kibana server-side request forgery
CVSS 4.3 mediumEPSS 0.27%Elastic Cloud
CVE-2020-11023 Potential XSS vulnerability in jQuery
CVSS 6.9 mediumKEV added EPSS 84.9%
CVE-2025-0651 File symlink abuse might lead to deleting files belonging to SYSTEM user
CVSS 7.1 highEPSS 0.30%Cloudflare
CVE-2025-0377 HashiCorp go-slug Vulnerable to Zip Slip Attack
CVSS 7.5 highEPSS 0.68%HashiCorp
CVE-2024-52973 Kibana allocation of resources without limits or throttling leads to crash
CVSS 6.5 mediumEPSS 0.39%Elastic Cloud
CVE-2024-37284 Elastic Defend Improper Handling of Alternate Encoding Leads to Crash
CVSS 5.5 mediumEPSS 0.16%Elastic Cloud
CVE-2025-20630 Mobile crash via object that can't be cast to String in Attachment Field
CVSS 6.5 mediumEPSS 0.64%Mattermost
CVE-2025-20621 Webapp crash via object that can't be cast to String in Attachment Field
CVSS 6.5 mediumEPSS 0.48%Mattermost
CVE-2025-20072 Mobile crash via improper validation of proto style in attachments
CVSS 6.5 mediumEPSS 0.55%Mattermost
CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability
CVSS 10.0 criticalKEV added EPSS 98.5%
CVE-2025-0476 Mobile crash via file with specially crafted filename
CVSS 4.3 mediumEPSS 0.38%Mattermost
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)