Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 1461–1480 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

CritPublished 13 Nov 2025, 09:09 WIB

CVE-2025-59367

CVE-2025-59367

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T02:09:55.309Z. Updated 2026-02-26T16:57:07.823Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:57 WIB

Official record

LowPublished 13 Nov 2025, 08:50 WIB

CVE-2025-64711

PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any user who drops a crafted file on PrivateBin will execute arbitr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1461 to 1480 of 3020.First page Next page

Published 2025-11-13T01:50:31.780Z. Updated 2025-11-13T14:34:51.745Z.

CVSS3.9v3.1KEVNot listedEPSSPresentUpdated13 Nov 2025, 21:34 WIB

Official record

MedPublished 13 Nov 2025, 08:46 WIB

CVE-2025-64716

Anubis vulnerable to possible XSS via redir parameter when using subrequest auth mode

Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots. Prior to version 1.23.0, when using subrequest authentication, Anubis did not perform validation of the redirect URL and redirects user to any URL scheme. While most modern browsers do not al…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T01:46:19.982Z. Updated 2025-11-13T14:34:57.055Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated13 Nov 2025, 21:34 WIB

Official record

MedPublished 13 Nov 2025, 08:40 WIB

CVE-2025-64710

Bitplatform Boilerplate has cross-site scripting vulnerability

Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compromise the security and integrity of web applications. Applica…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T01:40:55.653Z. Updated 2026-01-14T16:36:25.003Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jan 2026, 23:36 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-47220

CVE-2025-47220

A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an existing file, readab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2025-12-17T19:37:06.112Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Dec 2025, 02:37 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-47221

CVE-2025-47221

An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAME-PATTERN, ARCHIVETODISK_PATH_BASE, ARCHIVETODISK_PATH_PATTERN can be set to any path, even ones that will point to files that already exist. This vulnerability gives a user with admin access the possi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2025-12-17T19:39:21.076Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Dec 2025, 02:39 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-47222

CVE-2025-47222

A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to any of the properties requiring a class path and the provided class is not expected to return different errors if the class exists in deployment or not. This returns information about the classes loaded …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2025-12-17T19:41:48.899Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Dec 2025, 02:41 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-52186

CVE-2025-52186

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API. The players parameter is passed directly to an internal HTTP client without validation, allowing remote attackers to force the server to send HTTP requests…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2025-11-13T17:18:04.870Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Nov 2025, 00:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-55810

CVE-2025-55810

A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmware version 1.4.2, which allows physical attackers to execute commands as root via script file with a specific name on a SD card.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2025-11-14T18:04:05.466Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Nov 2025, 01:04 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60671

CVE-2025-60671

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then for…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:18:40.592Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60672

CVE-2025-60672

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to construct system commands exe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:18:44.398Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60673

CVE-2025-60673

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct iptables commands executed via twsystem(…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:18:48.876Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60674

CVE-2025-60674

A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127 bytes, causing a stack o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:18:52.967Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60675

CVE-2025-60675

A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new_qos.rule configuration file. The vulnerability occurs because parsed fields from the configuration file are concatenated into command strings…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:18:56.795Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:18 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60676

CVE-2025-60676

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed via system(). An attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:00.695Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60679

CVE-2025-60679

A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated using sprintf() into anot…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:05.270Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60682

CVE-2025-60682

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell commands and executed via…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:09.773Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60683

CVE-2025-60683

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that handles network interface reinitialization from '/var/system/linux_vlan_reinit'. Input is only partially validated by checking the prefix of inter…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:13.894Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60684

CVE-2025-60684

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function). The web interface reads the "lang" parameter and constructs Help URL strings using sprintf() into fixed-size stack buff…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:18.493Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record

UnscoredPublished 13 Nov 2025, 07:00 WIB

CVE-2025-60685

CVE-2025-60685

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads the /proc/stat file using fgets() into a local buffer and subsequently parses the line using sscanf() into a single-byte variable with the %s format specifier. Ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-13T00:00:00.000Z. Updated 2026-07-05T01:19:23.275Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:19 WIB

Official record