Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,054 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2576.3%
High1,14328%
Med1,56539%
Low1323.3%
None10.02%
Legacy00.00%
Unscored95624%

Matching records by UTC month

Nov 244,054

Signal coverage

KEV-listed: 16
With a forecast: 4,054
Unknown date: 0
Unscored severity: 956

Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.

Showing 1561–1580 of 4,054By severity band: Critical · 9.0–10.0 257, High · 7.0–8.9 1,143, Medium · 4.0–6.9 1,565, Low · 0.1–3.9 132, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 956

UnscoredPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50271

signal: restore the override_rlimit logic

In the Linux kernel, the following vulnerability has been resolved: signal: restore the override_rlimit logic Prior to commit d64696905554 ("Reimplement RLIMIT_SIGPENDING on top of ucounts") UCOUNT_RLIMIT_SIGPENDING rlimit was not enforced for a class of signals. However now it's enforced unconditionally, even if ov…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:09.788Z. Updated 2026-05-11T20:48:53.653Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50270

mm/damon/core: avoid overflow in damon_feed_loop_next_input()

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid overflow in damon_feed_loop_next_input() damon_feed_loop_next_input() is inefficient and fragile to overflows. Specifically, 'score_goal_diff_bp' calculation can overflow when 'score' is high. The calculation is actually unnece…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1561 to 1580 of 4054.First page Next page

Published 2024-11-19T01:30:08.406Z. Updated 2026-05-11T20:48:52.483Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50269

usb: musb: sunxi: Fix accessing an released usb phy

In the Linux kernel, the following vulnerability has been resolved: usb: musb: sunxi: Fix accessing an released usb phy Commit 6ed05c68cbca ("usb: musb: sunxi: Explicitly release USB PHY on exit") will cause that usb phy @glue->xceiv is accessed after released. 1) register platform driver @sunxi_musb_driver // get t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:06.910Z. Updated 2026-05-23T15:54:54.443Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:54 WIB

Official record

HighPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50268

usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() The "*cmd" variable can be controlled by the user via debugfs. That means "new_cam" can be as high as 255 while the size of the uc->updated[] array is UCSI_MAX_ALTMODES (30…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:05.437Z. Updated 2026-08-05T11:42:56.179Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

HighPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50267

USB: serial: io_edgeport: fix use after free in debug printk

In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: fix use after free in debug printk The "dev_dbg(&urb->dev->dev, ..." which happens after usb_free_urb(urb) is a use after free of the "urb" pointer. Store the "dev" pointer at the start of the function to avoid this issue.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:03.929Z. Updated 2026-08-05T11:42:55.096Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50266

clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs A recent change in the venus driver results in a stuck clock on the Lenovo ThinkPad X13s, for example, when streaming video in firefox: video_cc_mvs0_clk status stuck at 'off' WARNING…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:02.413Z. Updated 2026-05-11T20:48:47.914Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 19 Nov 2024, 08:30 WIB

CVE-2024-50265

ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() Syzkaller is able to provoke null-ptr-dereference in ocfs2_xa_remove(): [ 57.319872] (a.out,1161,7):ocfs2_xa_remove:2028 ERROR: status = -12 [ 57.320420] (a.out,1161,7…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:30:00.861Z. Updated 2026-05-11T20:48:46.700Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

HighPublished 19 Nov 2024, 08:29 WIB

CVE-2024-50264

vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans

In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans During loopback communication, a dangling pointer can be created in vsk->trans, potentially leading to a Use-After-Free condition. This issue is resolved by initializing vs…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:29:59.511Z. Updated 2026-08-05T11:42:54.020Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

HighPublished 19 Nov 2024, 08:26 WIB

CVE-2023-52921

drm/amdgpu: fix possible UAF in amdgpu_cs_pass1()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() Since the gang_size check is outside of chunk parsing loop, we need to reset i before we free the chunk data. Suggested by Ye Zhang (@VAR10CK) of Baidu Security.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T01:26:30.495Z. Updated 2026-08-05T09:12:01.402Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:12 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-48069

CVE-2024-48069

A vulnerability was found in Weaver E-cology allows attackers use race conditions to bypass security mechanisms to upload malicious files and control server privileges

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:32:21.047Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:32 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-48070

CVE-2024-48070

An issue in Weaver E-cology v. attackers construct special requests to insert remote malicious code and to trigger malicious code execution, and control server privileges

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:36:00.273Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:36 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-48071

CVE-2024-48071

E-cology has a directory traversal vulnerability. An attacker can exploit this vulnerability to delete the server directory, causing the server to permanently deny service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:38:59.609Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:38 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-48072

CVE-2024-48072

Weaver Ecology v9.* was discovered to contain a SQL injection vulnerability via the component /mobilemode/Action.jsp?invoker=com.weaver.formmodel.mobile.mec.servlet.MECAction&action=getFieldTriggerValue&searchField=*&fromTable=HrmResourceManager&whereClause=1%3d1&triggerCondition=1&expression=%3d&fieldValue=1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:31:38.408Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:31 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-48694

CVE-2024-48694

File Upload vulnerability in Xi'an Daxi Information technology OfficeWeb365 v.8.6.1.0 and v7.18.23.0 allows a remote attacker to execute arbitrary code via the pw/savedraw component.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:24:26.201Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:24 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-50803

CVE-2024-50803

The mediapool feature of the Redaxo Core CMS application v 5.17.1 is vulnerable to Cross Site Scripting(XSS) which allows a remote attacker to escalate privileges

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2026-07-05T16:04:58.664Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 23:04 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-52675

CVE-2024-52675

SourceCodester Sentiment Based Movie Rating System 1.0 is vulnerable to SQL Injection in /msrps/movies.php.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-21T16:46:33.361Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 23:46 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-52711

CVE-2024-52711

DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-22T17:11:22.590Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Nov 2024, 00:11 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-52714

CVE-2024-52714

Tenda AC6 v2.0 v15.03.06.50 was discovered to contain a buffer overflow in the function 'fromSetSysTime.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2026-07-05T00:51:02.834Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 07:51 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-52759

CVE-2024-52759

D-LINK DI-8003 v16.07.26A1 was discovered to contain a buffer overflow via the ip parameter in the ip_position_asp function.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-22T16:20:09.981Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:20 WIB

Official record

UnscoredPublished 19 Nov 2024, 07:00 WIB

CVE-2024-52762

CVE-2024-52762

A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-19T00:00:00.000Z. Updated 2024-11-20T19:25:19.566Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2024, 02:25 WIB

Official record