RewindexCVEs
CVEs
5,676 vulnerabilities, 1,764 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2025-20088 Insufficient Input Validation on Post Props
CVSS 6.5 mediumEPSS 0.58%Mattermost
CVE-2025-20086 Insufficient Input Validation on Post Props
CVSS 6.5 mediumEPSS 0.45%Mattermost
CVE-2025-21083 Insufficient Input Validation on Post Props
CVSS 6.5 mediumEPSS 0.54%Mattermost
CVE-2025-20036 Insufficient Input Validation on Post Props
CVSS 6.5 mediumEPSS 0.54%Mattermost
CVE-2025-21088 WebApp crash via improper validation of proto style in attachments
CVSS 6.5 mediumEPSS 0.58%Mattermost
CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling
CVSS 9.8 criticalEPSS 72.5%GitLab
CVE-2025-21334 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.6%
CVE-2025-21333 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 10.1%
CVE-2025-21335 Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
CVSS 7.8 highKEV added EPSS 1.4%
CVE-2024-12088 Rsync: --safe-links option bypass leads to path traversal
CVSS 6.5 mediumEPSS 4.6%GitLab
CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVSS 9.6 criticalKEV added EPSS 94.3%
CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
CVSS 6.6 mediumKEV added EPSS 32.2%
CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability
CVSS 9.6 criticalKEV added EPSS 47.7%
CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062
CVSS 6.6 mediumEPSS 0.42%Mailjet
CVE-2025-20033 DoS via custom post type for sysconsole plugin readers
CVSS 4.3 mediumEPSS 0.61%Mattermost
CVE-2024-13041 Incorrect User Management in GitLab
CVSS 4.2 mediumEPSS 0.30%GitLab
CVE-2024-6324 Inefficient Algorithmic Complexity in GitLab
CVSS 4.3 mediumEPSS 0.71%GitLab
CVE-2025-0282 Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability
CVSS 9.0 criticalKEV added EPSS 100.0%
CVE-2024-12431 Missing Authorization in GitLab
CVSS 4.3 mediumEPSS 0.44%GitLab
CVE-2024-55550 Mitel MiCollab Path Traversal Vulnerability
CVSS 4.4 mediumKEV added EPSS 38.2%
CVE-2024-41713 Mitel MiCollab Path Traversal Vulnerability
CVSS 9.1 criticalKEV added EPSS 97.2%
CVE-2020-2883 Oracle WebLogic Server Unspecified Vulnerability
CVSS 9.8 criticalKEV added EPSS 94.6%
CVE-2024-51741 Redis allows denial-of-service due to malformed ACL selectors
CVSS 4.4 mediumEPSS 0.30%Redis
CVE-2024-46981 Redis' Lua library commands may lead to remote code execution
CVSS 7.0 highEPSS 8.2%Redis
CVSS 7.5 highEPSS 0.36%Optimizely
CVSS 8.0 highEPSS 0.50%Optimizely
CVSS 5.7 mediumEPSS 0.37%Optimizely
CVSS 7.5 highEPSS 0.38%Optimizely
CVSS 7.3 highEPSS 0.29%Optimizely
CVSS 5.9 mediumEPSS 0.33%Optimizely
CVSS 7.5 highEPSS 0.42%Optimizely
CVSS 4.6 mediumEPSS 0.23%Optimizely
CVE-2024-56332 Next.js Vulnerable to Denial of Service (DoS) with Server Actions
CVSS 5.3 mediumEPSS 0.80%Vercel
CVE-2025-21610 Trix allows Cross-site Scripting via `javascript:` url in a link
CVSS 5.3 mediumEPSS 0.42%Basecamp
CVE-2024-3393 PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet
CVSS 7.5 highKEV added EPSS 29.1%
CVE-2023-5117 Exposure of Sensitive Information Due to Incompatible Policies in GitLab
CVSS 3.7 lowEPSS 0.32%GitLab
CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability
CVSS 8.1 highKEV added EPSS 17.6%
CVSS 7.5 highEPSS 56.0%BitbucketConfluenceJira
CVE-2024-12356 Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
CVSS 9.8 criticalKEV added EPSS 87.4%
CVSS 7.1 highEPSS 0.81%Microsoft Teams
CVSS 7.1 highEPSS 0.80%Microsoft Teams
CVSS 7.1 highEPSS 0.91%Microsoft Teams
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)