Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 141–160 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

HighPublished 29 Jun 2025, 03:31 WIB

CVE-2025-6825

TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T20:31:07.693Z. Updated 2025-06-30T15:55:59.251Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:55 WIB

Official record

HighPublished 29 Jun 2025, 03:00 WIB

CVE-2025-6824

TOTOLINK X15 HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 141 to 160 of 3682.First page Next page

Published 2025-06-28T20:00:17.046Z. Updated 2025-06-30T15:57:14.695Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:57 WIB

Official record

MedPublished 29 Jun 2025, 02:31 WIB

CVE-2025-6823

code-projects Inventory Management System editProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /php_action/editProduct.php. The manipulation of the argument editProductName leads to sql injection. The attack may be initiated remotely. The exploit has be…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T19:31:06.419Z. Updated 2025-06-30T15:58:47.762Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:58 WIB

Official record

MedPublished 29 Jun 2025, 01:31 WIB

CVE-2025-6822

code-projects Inventory Management System removeProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /php_action/removeProduct.php. The manipulation of the argument productId leads to sql injection. The attack can be initiated remotely. The exploit has been d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T18:31:05.801Z. Updated 2025-06-30T16:00:21.697Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:00 WIB

Official record

UnscoredPublished 29 Jun 2025, 01:25 WIB

CVE-2025-32897

Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubating): from 2.0.0 before 2.3.0. Severity Justification: The Ap…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T18:25:18.312Z. Updated 2026-03-30T08:35:55.447Z.

CVSS—KEVNot listedEPSSPresentUpdated30 Mar 2026, 15:35 WIB

Official record

MedPublished 29 Jun 2025, 01:00 WIB

CVE-2025-6821

code-projects Inventory Management System createOrder.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown part of the file /php_action/createOrder.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T18:00:13.459Z. Updated 2025-06-30T20:17:03.677Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 03:17 WIB

Official record

MedPublished 29 Jun 2025, 00:31 WIB

CVE-2025-6820

code-projects Inventory Management System createProduct.php sql injection

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /php_action/createProduct.php. The manipulation of the argument productName leads to sql injection. The attack may be launched remotely. The exploit has…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T17:31:05.378Z. Updated 2025-06-30T20:17:59.647Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 03:17 WIB

Official record

MedPublished 28 Jun 2025, 23:31 WIB

CVE-2025-6819

code-projects Inventory Management System removeBrand.php sql injection

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /php_action/removeBrand.php. The manipulation of the argument brandId leads to sql injection. The attack can be launched remotely. The exploi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T16:31:05.642Z. Updated 2025-06-30T20:18:37.551Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 03:18 WIB

Official record

LowPublished 28 Jun 2025, 22:38 WIB

CVE-2023-28902

Denial of Service via integer underflow in picserver

An integer underflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause denial-of-service of the infotainment system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:38:23.242Z. Updated 2025-06-30T19:20:28.406Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

LowPublished 28 Jun 2025, 22:38 WIB

CVE-2023-28903

CVE-2023-28903

An integer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker with local access to the vehicle to cause a denial-of-service of the infotainment system.

Excerpt language: en.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:38:02.954Z. Updated 2025-06-30T19:20:34.306Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

MedPublished 28 Jun 2025, 22:37 WIB

CVE-2023-28904

Bypass of secure boot process

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:37:35.093Z. Updated 2025-06-30T19:20:40.496Z.

CVSS5.2v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

HighPublished 28 Jun 2025, 22:37 WIB

CVE-2023-28905

Heap buffer overflow in picserver

A heap buffer overflow in the image processing binary of the MIB3 infotainment unit allows an attacker to execute arbitrary code on it. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of affected MIB3 OEM part numbers is provided in the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:37:09.395Z. Updated 2025-06-30T19:20:46.621Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

HighPublished 28 Jun 2025, 22:36 WIB

CVE-2023-28906

Command injection in networking service

A command injection in the networking service of the MIB3 infotainment allows an attacker already presenting in the system to escalate privileges and obtain administrative access to the system. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:36:47.874Z. Updated 2025-06-30T19:20:53.245Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

MedPublished 28 Jun 2025, 22:36 WIB

CVE-2023-28907

A lack of access restrictions on internal memory regions

There is no memory isolation between CPU cores of the MIB3 infotainment. This fact allows an attacker with access to the main operating system to compromise the CPU core responsible for CAN message processing. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part numbe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:36:10.983Z. Updated 2025-06-30T19:20:58.905Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:20 WIB

Official record

MedPublished 28 Jun 2025, 22:35 WIB

CVE-2023-28908

Integer Overflow in Non-Fragmented Data Reception

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving non-fragmented HCI packets on a channel. The vulnerability was originally discovered in Skoda Superb III car with…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:35:48.124Z. Updated 2025-06-30T19:21:06.102Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:21 WIB

Official record

HighPublished 28 Jun 2025, 22:35 WIB

CVE-2023-28909

Integer Overflow Leading to MTU Bypass

A specific flaw exists within the Bluetooth stack of the MIB3 unit. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow when receiving fragmented HCI packets on a channel. An attacker can leverage this vulnerability to bypass the MTU check on a channel wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:35:21.590Z. Updated 2025-06-30T19:21:12.865Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:21 WIB

Official record

HighPublished 28 Jun 2025, 22:34 WIB

CVE-2023-28910

Disabled Abortion Flag

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment system. The issue results from the disabled abortion flag eventually leading to bypassing assertion functions. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM part number 3V0035820. The list of…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:34:50.755Z. Updated 2025-06-30T15:09:53.450Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:09 WIB

Official record

MedPublished 28 Jun 2025, 22:34 WIB

CVE-2023-28911

Arbitrary Channel Disconnection Resulting in Denial of Service

A specific flaw exists within the Bluetooth stack of the MIB3 infotainment. The issue results from the lack of proper validation of user-supplied data, which can result in an arbitrary channel disconnection. An attacker can leverage this vulnerability to cause a denial-of-service attack for every connected client of th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:34:25.867Z. Updated 2025-06-30T15:08:00.610Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:08 WIB

Official record

MedPublished 28 Jun 2025, 22:33 WIB

CVE-2023-28912

Cleartext Phonebook Information

The MIB3 unit stores the synchronized phone contact book in clear-text, allowing an attacker with either code execution privilege on the system or physical access to the system to obtain vehicle owner's contact data. The vulnerability was originally discovered in Skoda Superb III car with MIB3 infotainment unit OEM par…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:33:58.714Z. Updated 2025-06-30T15:05:14.568Z.

CVSS5.7v3.1KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:05 WIB

Official record

MedPublished 28 Jun 2025, 22:33 WIB

CVE-2023-29113

A lack of access control in custom IPC mechanism

The MIB3 infotainment unit used in Skoda and Volkswagen vehicles does not incorporate any privilege separation for the proprietary inter-process communication mechanism, leaving attackers with presence in the system an ability to undermine access control restrictions implemented at the operating system level. The vulne…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-28T15:33:26.500Z. Updated 2025-06-30T16:04:36.932Z.

CVSS6.3v3.1KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:04 WIB

Official record