Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 1581–1600 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50389

tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak

In the Linux kernel, the following vulnerability has been resolved: tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak In crb_acpi_add(), we get the TPM2 table to retrieve information like start method, and then assign them to the priv data, so the TPM2 table is not used after the init, should be freed,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:09.322Z. Updated 2026-05-11T19:18:35.456Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50388

nvme: fix multipath crash caused by flush request when blktrace is enabled

In the Linux kernel, the following vulnerability has been resolved: nvme: fix multipath crash caused by flush request when blktrace is enabled The flush request initialized by blk_kick_flush has NULL bio, and it may be dealt with nvme_end_req during io completion. When blktrace is enabled, nvme_trace_bio_complete wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1581 to 1600 of 4319.First page Next page

Published 2025-09-18T13:33:08.612Z. Updated 2026-05-11T19:18:34.280Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50387

net: hinic: fix the issue of CMDQ memory leaks

In the Linux kernel, the following vulnerability has been resolved: net: hinic: fix the issue of CMDQ memory leaks When hinic_set_cmdq_depth() fails in hinic_init_cmdqs(), the cmdq memory is not released correctly. Fix it.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:07.932Z. Updated 2026-05-11T19:18:33.132Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

HighPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50386

Bluetooth: L2CAP: Fix user-after-free

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix user-after-free This uses l2cap_chan_hold_unless_zero() after calling __l2cap_get_chan_blah() to prevent the following trace: Bluetooth: l2cap_core.c:static void l2cap_chan_destroy(struct kref *kref) Bluetooth: chan 0000000023c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:07.191Z. Updated 2026-08-05T08:58:30.414Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50385

NFS: Fix an Oops in nfs_d_automount()

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix an Oops in nfs_d_automount() When mounting from a NFSv4 referral, path->dentry can end up being a negative dentry, so derive the struct nfs_server from the dentry itself instead.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:06.484Z. Updated 2026-05-11T19:18:30.878Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

HighPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50384

staging: vme_user: Fix possible UAF in tsi148_dma_list_add

In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: Fix possible UAF in tsi148_dma_list_add Smatch report warning as follows: drivers/staging/vme_user/vme_tsi148.c:1757 tsi148_dma_list_add() warn: '&entry->list' not removed from list In tsi148_dma_list_add(), the error path "got…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:05.759Z. Updated 2026-08-05T08:58:29.333Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50383

media: mediatek: vcodec: Can't set dst buffer to done when lat decode error

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: Can't set dst buffer to done when lat decode error Core thread will call v4l2_m2m_buf_done to set dst buffer done for lat architecture. If lat call v4l2_m2m_buf_done_and_job_finish to free dst buffer when lat decode error, co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:04.969Z. Updated 2026-05-11T19:18:28.611Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50382

padata: Always leave BHs disabled when running ->parallel()

In the Linux kernel, the following vulnerability has been resolved: padata: Always leave BHs disabled when running ->parallel() A deadlock can happen when an overloaded system runs ->parallel() in the context of the current task: padata_do_parallel ->parallel() pcrypt_aead_enc/dec padata_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:04.193Z. Updated 2026-05-11T19:18:27.430Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50381

md: fix a crash in mempool_free

In the Linux kernel, the following vulnerability has been resolved: md: fix a crash in mempool_free There's a crash in mempool_free when running the lvm test shell/lvchange-rebuild-raid.sh. The reason for the crash is this: * super_written calls atomic_dec_and_test(&mddev->pending_writes) and wake_up(&mddev->sb_wa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:03.439Z. Updated 2026-05-11T19:18:26.291Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50380

mm: /proc/pid/smaps_rollup: fix no vma's null-deref

In the Linux kernel, the following vulnerability has been resolved: mm: /proc/pid/smaps_rollup: fix no vma's null-deref Commit 258f669e7e88 ("mm: /proc/pid/smaps_rollup: convert to single value seq_file") introduced a null-deref if there are no vma's in the task in show_smaps_rollup.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:02.472Z. Updated 2026-05-11T19:18:25.104Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50379

btrfs: fix race between quota enable and quota rescan ioctl

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix race between quota enable and quota rescan ioctl When enabling quotas, at btrfs_quota_enable(), after committing the transaction, we change fs_info->quota_root to point to the quota root we created and set BTRFS_FS_QUOTA_ENABLED at fs_info…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:01.502Z. Updated 2026-05-11T19:18:23.937Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:33 WIB

CVE-2022-50378

drm/meson: reorder driver deinit sequence to fix use-after-free bug

In the Linux kernel, the following vulnerability has been resolved: drm/meson: reorder driver deinit sequence to fix use-after-free bug Unloading the driver triggers the following KASAN warning: [ +0.006275] ============================================================= [ +0.000029] BUG: KASAN: use-after-free in __…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:33:00.694Z. Updated 2026-08-15T12:23:24.666Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:32 WIB

CVE-2022-50376

orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init()

In the Linux kernel, the following vulnerability has been resolved: orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() When insert and remove the orangefs module, there are memory leaked as below: unreferenced object 0xffff88816b0cc000 (size 2048): comm "insmod", pid 783, jiffies 4294813439 (age 65.51…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:32:59.110Z. Updated 2026-08-15T12:23:22.283Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Sep 2025, 20:32 WIB

CVE-2022-50375

tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown

In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown lpuart_dma_shutdown tears down lpuart dma, but lpuart_flush_buffer can still occur which in turn tries to access dma apis if lpuart_dma_tx_use flag is true. At this point sin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:32:58.361Z. Updated 2026-05-11T19:18:20.373Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

MedPublished 18 Sep 2025, 20:32 WIB

CVE-2025-10669

Airsonic-Advanced Playlist Upload unrestricted upload

A vulnerability was detected in Airsonic-Advanced up to 10.6.0. This vulnerability affects unknown code of the component Playlist Upload Handler. Performing manipulation results in unrestricted upload. It is possible to initiate the attack remotely. The exploit is now public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:32:09.467Z. Updated 2025-09-18T13:40:39.251Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated18 Sep 2025, 20:40 WIB

Official record

MedPublished 18 Sep 2025, 20:32 WIB

CVE-2025-10668

itsourcecode Online Discussion Forum compose_msg_admin.php sql injection

A security vulnerability has been detected in itsourcecode Online Discussion Forum 1.0. This affects an unknown part of the file /members/compose_msg_admin.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:32:07.040Z. Updated 2025-09-18T13:41:36.072Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated18 Sep 2025, 20:41 WIB

Official record

MedPublished 18 Sep 2025, 20:02 WIB

CVE-2025-10667

itsourcecode Online Discussion Forum compose_msg.php sql injection

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. Affected by this issue is some unknown functionality of the file /members/compose_msg.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:02:10.036Z. Updated 2025-09-18T13:19:11.612Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated18 Sep 2025, 20:19 WIB

Official record

HighPublished 18 Sep 2025, 20:02 WIB

CVE-2025-10666

D-Link DIR-825 apply.cgi sub_4106d4 buffer overflow

A security flaw has been discovered in D-Link DIR-825 up to 2.10. Affected by this vulnerability is the function sub_4106d4 of the file apply.cgi. The manipulation of the argument countdown_time results in buffer overflow. The attack can be executed remotely. The exploit has been released to the public and may be explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T13:02:06.922Z. Updated 2026-02-03T21:40:18.422Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated04 Feb 2026, 04:40 WIB

Official record

MedPublished 18 Sep 2025, 19:02 WIB

CVE-2025-10665

kidaze CourseSelectionSystem COUNT3s3.php sql injection

A vulnerability was identified in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Affected is an unknown function of the file /Profilers/PProfile/COUNT3s3.php. The manipulation of the argument csem leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T12:02:10.246Z. Updated 2025-09-18T13:20:07.829Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated18 Sep 2025, 20:20 WIB

Official record

MedPublished 18 Sep 2025, 19:02 WIB

CVE-2025-10664

PHPGurukul Small CRM create-ticket.php sql injection

A vulnerability was determined in PHPGurukul Small CRM 4.0. This impacts an unknown function of the file /create-ticket.php. Executing manipulation of the argument subject can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T12:02:07.491Z. Updated 2025-09-18T13:23:00.921Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated18 Sep 2025, 20:23 WIB

Official record