Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,774 published records · 14 KEV · 3,774 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,774 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2967.8%
High1,13730%
Med1,44438%
Low962.5%
None00.00%
Legacy00.00%
Unscored80121%

Matching records by UTC month

Jul 253,774

Signal coverage

KEV-listed: 14
With a forecast: 3,774
Unknown date: 0
Unscored severity: 801

Share of cohort: KEV 0.37% · forecast 100% · unscored 21%.

Showing 1621–1640 of 3,774By severity band: Critical · 9.0–10.0 296, High · 7.0–8.9 1,137, Medium · 4.0–6.9 1,444, Low · 0.1–3.9 96, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 801

CritPublished 17 Jul 2025, 08:44 WIB

CVE-2025-5396

Bears Backup <= 2.0.0 - Unauthenticated Remote Code Execution

The Bears Backup plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.0. This is due to the bbackup_ajax_handle() function not having a capability check, nor validating user supplied input passed directly to call_user_func(). This makes it possible for unauthenticated at…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T01:44:54.566Z. Updated 2026-04-08T17:03:48.761Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:03 WIB

Official record

MedPublished 17 Jul 2025, 08:14 WIB

CVE-2025-7728

Scada-LTS users.shtm cross site scripting

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1621 to 1640 of 3774.First page Next page

Published 2025-07-17T01:14:05.511Z. Updated 2025-07-17T14:44:25.711Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated17 Jul 2025, 21:44 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2023-41566

CVE-2023-41566

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do. This vulnerability allows attackers to obtain the password of the background administrator and further obtain database permissions.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-24T20:12:21.905Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Jul 2025, 03:12 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2023-47356

CVE-2023-47356

Mingyu Security Gateway before v3.0-5.3p was discovered to contain a remote command execution (RCE) vulnerability via the log_type parameter at /log/fw_security.mds.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-24T20:14:33.545Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Jul 2025, 03:14 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2024-32323

CVE-2024-32323

SQL Injection vulnerability in cnhcit.com Haichang OA v.1.0.0 allows a remote attacker to obtain sensitive information via the if parameter in hcit.project.rte.agents.UploadImages.class.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-24T20:16:06.222Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Jul 2025, 03:16 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-46102

CVE-2025-46102

Cross Site Scripting vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model (SCORM) version V.5.4.3 allows a remote attacker to obtain sensitive information via the URL parameter

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2026-07-05T01:02:34.597Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:02 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-47189

CVE-2025-47189

Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 before 11.1.25162.02 allows XSS for authentication error data of certain user flows, a different vulnerability than CVE-2025-54392.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-21T18:34:52.563Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Jul 2025, 01:34 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-50240

CVE-2025-50240

nbcio-boot v1.0.3 was discovered to contain a SQL injection vulnerability via the userIds parameter at /sys/user/deleteRecycleBin.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-18T14:58:12.560Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Jul 2025, 21:58 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-51497

CVE-2025-51497

An issue was discovered in AdGuard plugin before 1.11.22 for Safari on MacOS. AdGaurd verbosely logged each url that Safari accessed when the plugin was active. These logs went into the MacOS general logs for any unsandboxed process to read. This may be disabled in version 1.11.22.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-24T20:17:51.963Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Jul 2025, 03:17 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-51630

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-17T19:14:19.497Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Jul 2025, 02:14 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-52046

CVE-2025-52046

Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-09-15T15:03:24.239Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Sep 2025, 22:03 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-53867

CVE-2025-53867

Island Lake WebBatch before 2025C allows Remote Code Execution via a crafted URL.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2026-07-05T01:03:28.598Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:03 WIB

Official record

UnscoredPublished 17 Jul 2025, 07:00 WIB

CVE-2025-53964

CVE-2025-53964

GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-17T00:00:00.000Z. Updated 2025-07-17T20:30:47.748Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Jul 2025, 03:30 WIB

Official record

CritPublished 17 Jul 2025, 04:26 WIB

CVE-2025-34132

LILIN DVR Command Injection via NTPUpdate in dvr_box

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:26:51.852Z. Updated 2026-05-15T11:14:50.567Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:14 WIB

Official record

HighPublished 17 Jul 2025, 04:26 WIB

CVE-2025-34130

LILIN DVR Arbitrary File Read via net_html.cgi

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to facilitate further…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:26:42.449Z. Updated 2026-05-15T11:14:49.816Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:14 WIB

Official record

HighPublished 17 Jul 2025, 04:26 WIB

CVE-2025-34129

LILIN DVR RCE via Malicious FTP/NTP Configuration

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the configuration interface can upload a malicious XML file with inj…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:26:32.446Z. Updated 2026-05-15T11:14:48.811Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:14 WIB

Official record

HighPublished 17 Jul 2025, 04:10 WIB

CVE-2025-34128

X360 VideoPlayer ActiveX Control Buffer Overflow via ConvertFile()

A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code within the context of …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:10:31.205Z. Updated 2026-04-07T14:09:47.863Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

CritPublished 17 Jul 2025, 04:10 WIB

CVE-2025-34127

Achat v0.150 SEH Buffer Overflow via UDP

A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:10:22.494Z. Updated 2026-04-07T14:09:47.085Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

HighPublished 17 Jul 2025, 04:10 WIB

CVE-2025-34126

RIPS Scanner v0.54 Path Traversal

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:10:13.388Z. Updated 2026-07-14T22:25:45.506Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

CritPublished 17 Jul 2025, 04:09 WIB

CVE-2025-34125

D-Link DSP-W110A1 Cookie Command Injection

An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the underlying Linux operating sys…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-16T21:09:59.215Z. Updated 2026-04-07T14:09:45.288Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record