Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 1501–1520 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

MedPublished 28 Sep 2026, 15:00 WIB

CVE-2026-101013

mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T08:00:11.772Z. Updated 2026-09-28T11:05:12.795Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Sep 2026, 18:05 WIB

Official record

HighPublished 28 Sep 2026, 14:53 WIB

CVE-2026-82379

Apache Roller: WSSE digest authentication headers can be replayed

Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacker who captures a valid WSSE digest authentication header to replay it and gain the victim's AtomPub authority, because the authentication does not enforce nonce uniqueness or timestamp freshness. Only installations that enable the non-defau…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1501 to 1520 of 14934.First page Next page

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:53:00.862Z. Updated 2026-09-29T15:39:42.128Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 22:39 WIB

Official record

HighPublished 28 Sep 2026, 14:52 WIB

CVE-2026-82380

Apache Roller: CSRF protection bypass via self-generated salt validation

Cross-Site Request Forgery (CSRF) in Apache Roller 6.1.5 allows a remote attacker to cause a logged-in user to perform state-changing actions under the victim's authority, because the CSRF validation filters accept a request that does not submit the required salt token, validating instead against a value the server its…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:52:27.872Z. Updated 2026-09-28T13:31:30.215Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated28 Sep 2026, 20:31 WIB

Official record

MedPublished 28 Sep 2026, 14:51 WIB

CVE-2026-82381

Apache Roller: Stored cross-site scripting in the authoring UI

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with authoring rights on a weblog to store crafted content that is later written into the authoring UI's JavaScript string literals and markup sinks without proper encoding, causing the stored scrip…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:51:54.776Z. Updated 2026-09-28T13:31:30.345Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated28 Sep 2026, 20:31 WIB

Official record

MedPublished 28 Sep 2026, 14:51 WIB

CVE-2026-82382

Apache Roller: Reflected cross-site scripting in the frontpage directory parameter

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting against a visitor to a weblog using the bundled frontpage theme, by supplying a crafted blog-directory parameter that the directory page reflects…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:51:31.108Z. Updated 2026-09-28T13:31:30.477Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated28 Sep 2026, 20:31 WIB

Official record

HighPublished 28 Sep 2026, 14:48 WIB

CVE-2026-82383

Apache Roller: Anonymous setup action allows frontpage configuration tampering

Missing Authentication for Critical Function in Apache Roller 6.1.5 allows an unauthenticated remote attacker to persistently change a site-global configuration value (the frontpage weblog selection) on any installed instance, because the setup action remains anonymously reachable after installation and persists config…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:48:34.394Z. Updated 2026-09-28T13:31:30.607Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated28 Sep 2026, 20:31 WIB

Official record

CritPublished 28 Sep 2026, 14:47 WIB

CVE-2026-82384

Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

Deserialization of Untrusted Data in Apache Roller 6.1.5 allows an unauthenticated remote attacker to cause deserialization of attacker-controlled bytes, because the XML-RPC endpoint accepts vendor extension types that are deserialized during request parsing, before authentication. The servlet is mapped unconditionally…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:47:43.768Z. Updated 2026-09-29T03:55:21.491Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 10:55 WIB

Official record

HighPublished 28 Sep 2026, 14:46 WIB

CVE-2026-82375

Apache Roller: Server-side request forgery via entry trackback and enclosure URLs

Server-Side Request Forgery (SSRF) in Apache Roller 6.1.5 allows an authenticated user with entry-editing rights on a weblog to cause outbound HTTP requests to attacker-chosen destinations through legacy outbound Trackback and entry enclosure handling. The Trackback control is hidden in the standard UI, but its action …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:46:48.496Z. Updated 2026-09-28T13:31:30.860Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated28 Sep 2026, 20:31 WIB

Official record

HighPublished 28 Sep 2026, 14:46 WIB

CVE-2026-82376

Apache Roller: XML external entity processing in trackback response parser

Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a user with entry-editing rights on a weblog to cause the server to parse an attacker-influenced trackback response with an XML parser that does not disable external entity resolution, leading to disclosure of files readable by the Roll…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:46:10.284Z. Updated 2026-09-29T14:50:39.661Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 21:50 WIB

Official record

CritPublished 28 Sep 2026, 14:45 WIB

CVE-2026-82377

Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers

Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belonging to other weblogs through the legacy XML-RPC Blogger and MetaWeblog APIs, because the handlers authenticate the caller but do not verify the caller's permission on the weblog or entry actually af…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:45:40.162Z. Updated 2026-09-29T15:39:42.299Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 22:39 WIB

Official record

CritPublished 28 Sep 2026, 14:45 WIB

CVE-2026-82378

Apache Roller: OAuth authorization endpoint trusts request-supplied identity

Incorrect Authorization in the OAuth 1.0a authorization endpoint of Apache Roller 6.1.5 allows an unauthenticated remote attacker who learns an outstanding request token for a configured site-wide consumer to bind that token to an arbitrary user account, including an administrator, by submitting an unsigned authorizati…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:45:10.950Z. Updated 2026-09-29T15:39:42.425Z.

CVSS9v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 22:39 WIB

Official record

MedPublished 28 Sep 2026, 14:45 WIB

CVE-2026-101012

mathurvishal CloudClassroom-PHP-Project makeresult.php sql injection

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit has been made available …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:45:09.138Z. Updated 2026-10-01T13:56:33.797Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 20:56 WIB

Official record

MedPublished 28 Sep 2026, 14:44 WIB

CVE-2026-82385

Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files

Exposure of Sensitive Information to an Unauthorized Actor in Apache Roller 6.1.5 allows a weblog administrator to read files on the application classpath, including Roller configuration files containing secrets, by authoring a Velocity template that uses an include directive to load a classpath resource outside the th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:44:07.273Z. Updated 2026-09-29T14:54:38.330Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 21:54 WIB

Official record

HighPublished 28 Sep 2026, 14:43 WIB

CVE-2026-82386

Apache Roller: XML external entity processing in OPML bookmark import

Improper Restriction of XML External Entity Reference in Apache Roller 6.1.5 allows a weblog administrator to read files readable by the Roller process and reach internal network addresses by importing a crafted OPML document, because the bookmark import parser does not disable external entity resolution. No non-defaul…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:43:31.795Z. Updated 2026-09-29T14:56:22.416Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 21:56 WIB

Official record

HighPublished 28 Sep 2026, 14:36 WIB

CVE-2026-82348

Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups

Authorization Bypass Through User-Controlled Key in Apache Roller 6.1.5 allows an authenticated user with authoring rights on one weblog to read, modify, or delete resources belonging to another weblog through unscoped identifier-based lookups. This affects multi-user installations where users are intended to be isolat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:36:45.897Z. Updated 2026-09-29T14:57:34.336Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 21:57 WIB

Official record

MedPublished 28 Sep 2026, 14:36 WIB

CVE-2026-82387

Apache Roller: Stored cross-site scripting via uploaded media content type

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a user with media-upload rights to store active content on Roller's origin, because the media upload feature trusts the upload-supplied content type and serves the stored file back with that type. A victim…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:36:12.427Z. Updated 2026-09-29T14:58:22.334Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated29 Sep 2026, 21:58 WIB

Official record

MedPublished 28 Sep 2026, 14:35 WIB

CVE-2026-82546

Apache Roller: Stored cross-site scripting through incoming Trackback links

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an unauthenticated remote attacker to store a crafted comment-author URL through the incoming Trackback endpoint when a published entry accepts comments and Trackbacks. The shipped Trackback, verification …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:35:38.234Z. Updated 2026-09-30T11:41:21.436Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 18:41 WIB

Official record

MedPublished 28 Sep 2026, 14:34 WIB

CVE-2026-91204

Apache Roller: Stored javascript: URI in HTML comments

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows an anonymous remote attacker to store a comment containing a javascript: URI link that survives HTML comment formatting and can execute script in the browser of a visitor who clicks it. This affects only s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:34:33.187Z. Updated 2026-09-30T11:39:14.237Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 18:39 WIB

Official record

MedPublished 28 Sep 2026, 14:33 WIB

CVE-2026-91206

Apache Roller: Reflected XSS in the optional LDAP comment authenticator

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 6.1.5 allows a remote attacker to perform reflected cross-site scripting through the optional LDAP comment authenticator, which writes request parameter values into its HTML form without escaping. This affects only sit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:33:13.837Z. Updated 2026-09-30T11:38:21.208Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 18:38 WIB

Official record

MedPublished 28 Sep 2026, 14:30 WIB

CVE-2026-101011

aaPanel BaoTa Domain domainMod.py get_domain_status sql injection

A security flaw has been discovered in aaPanel BaoTa up to 11.8.0. This affects the function get_domain_status of the file /www/server/panel/mod/project/domain/domainMod.py of the component Domain Handler. The manipulation of the argument get results in sql injection. It is possible to launch the attack remotely. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-28T07:30:15.539Z. Updated 2026-09-28T12:52:33.948Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated28 Sep 2026, 19:52 WIB

Official record