Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 1761–1780 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

MedPublished 20 Dec 2025, 01:02 WIB

CVE-2025-14959

code-projects Simple Stock System signup.php sql injection

A weakness has been identified in code-projects Simple Stock System 1.0. This issue affects some unknown processing of the file /market/signup.php. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and coul…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T18:02:06.093Z. Updated 2026-02-24T05:57:57.140Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:57 WIB

Official record

MedPublished 20 Dec 2025, 00:32 WIB

CVE-2025-14958

floooh sokol sokol_gfx.h _sg_pipeline_common_init heap-based overflow

A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932. This vulnerability affects the function _sg_pipeline_common_init in the library sokol_gfx.h. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1761 to 1780 of 5493.First page Next page

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T17:32:08.136Z. Updated 2025-12-19T17:50:45.452Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated20 Dec 2025, 00:50 WIB

Official record

MedPublished 20 Dec 2025, 00:11 WIB

CVE-2025-68430

CVAT vulnerable to directory traversal via mounted share listing

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.8.1 through 2.52.0, an attacker with an account on a CVAT instance is able to retrieve the contents of any file system directory accessible to the CVAT server. The exposed information is names of contained files and su…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T17:11:46.949Z. Updated 2025-12-19T17:59:36.869Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated20 Dec 2025, 00:59 WIB

Official record

HighPublished 20 Dec 2025, 00:10 WIB

CVE-2025-68478

Langflow Vulnerable to External Control of File Name or Path

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, if an arbitrary path is specified in the request body's `fs_path`, the server serializes the Flow object into JSON and creates/overwrites a file at that path. There is no path restriction, normalization, or allowed di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T17:10:14.107Z. Updated 2025-12-19T17:59:42.829Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 00:59 WIB

Official record

MedPublished 20 Dec 2025, 00:02 WIB

CVE-2025-14957

WebAssembly Binaryen IRBuilder wasm-ir-builder.cpp makeLocalTee null pointer dereference

A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer dereference. Local access…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T17:02:16.843Z. Updated 2026-02-24T05:57:44.642Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:57 WIB

Official record

HighPublished 19 Dec 2025, 23:43 WIB

CVE-2025-68477

Langflow vulnerable to Server-Side Request Forgery

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.0, Langflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the reques…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:43:00.551Z. Updated 2025-12-19T17:59:55.722Z.

CVSS7.7v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 00:59 WIB

Official record

LowPublished 19 Dec 2025, 23:40 WIB

CVE-2025-68457

Orejime has executable code in HTML attributes

Orejime is a consent manager that focuses on accessibility. On HTML elements handled by Orejime prior to version 2.3.2, one could run malicious code by embedding `javascript:` code within data attributes. When consenting to the related purpose, Orejime would turn data attributes into unprefixed ones (i.e. `data-href` i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 0.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:40:30.258Z. Updated 2026-01-13T16:53:35.324Z.

CVSS0.6v4.0KEVNot listedEPSSPresentUpdated13 Jan 2026, 23:53 WIB

Official record

HighPublished 19 Dec 2025, 23:39 WIB

CVE-2025-14809

Address bar spoofing risk in ArcSearch on Android

ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interaction via crafted web content.

Excerpt language: en.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:39:29.458Z. Updated 2025-12-19T18:00:13.120Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 01:00 WIB

Official record

HighPublished 19 Dec 2025, 23:38 WIB

CVE-2025-14812

Address bar spoofing risk in Arc Search on iOS

ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasing spoofing risk.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:38:58.980Z. Updated 2025-12-19T16:50:33.125Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated19 Dec 2025, 23:50 WIB

Official record

CritPublished 19 Dec 2025, 23:37 WIB

CVE-2025-66580

Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:37:52.189Z. Updated 2025-12-19T18:00:19.349Z.

CVSS9.7v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 01:00 WIB

Official record

MedPublished 19 Dec 2025, 23:35 WIB

CVE-2025-65035

GLPI Database Inventory Plugin Vulnerable to Stored Object Injection

pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation. Prior to version 1.1.2, in certain conditions (database write access must first be obtained through another vulnerability or misconfiguration), user-controlled dat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:35:56.944Z. Updated 2025-12-19T18:00:25.116Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 01:00 WIB

Official record

MedPublished 19 Dec 2025, 23:34 WIB

CVE-2023-30971

Gaia unauthenticated endpoints

Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:34:19.437Z. Updated 2025-12-19T18:00:30.734Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated20 Dec 2025, 01:00 WIB

Official record

CritPublished 19 Dec 2025, 23:33 WIB

CVE-2024-49587

Glutton V1 endpoints missing authentication

Glutton V1 service endpoints were exposed without any authentication on Gotham stacks, this could have allowed users that did not have any permission to hit glutton backend directly and read/update/delete data. The affected service has been patched and automatically deployed to all Apollo-managed Gotham Instances

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:33:22.971Z. Updated 2026-02-26T16:07:24.881Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

MedPublished 19 Dec 2025, 23:32 WIB

CVE-2025-14956

WebAssembly Binaryen wasm-binary.cpp readExport heap-based overflow

A vulnerability was determined in WebAssembly Binaryen up to 125. Affected by this issue is the function WasmBinaryReader::readExport of the file src/wasm/wasm-binary.cpp. This manipulation causes heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclosed …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:32:12.536Z. Updated 2026-02-24T05:57:29.961Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:57 WIB

Official record

MedPublished 19 Dec 2025, 23:32 WIB

CVE-2025-14955

Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is characterized by high com…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:32:08.036Z. Updated 2026-02-24T05:57:13.107Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:57 WIB

Official record

MedPublished 19 Dec 2025, 23:26 WIB

CVE-2025-58053

Galette has a privilege escalation vulnerability

Galette is a membership management web application for non profit organizations. Prior to version 1.2.0, while updating any existing account with a self forged POST request, one can gain higher privileges. Version 1.2.0 fixes the issue.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:26:00.148Z. Updated 2025-12-19T18:00:53.263Z.

CVSS4.9v4.0KEVNot listedEPSSPresentUpdated20 Dec 2025, 01:00 WIB

Official record

LowPublished 19 Dec 2025, 23:24 WIB

CVE-2025-58052

Galette has groups managers access control bypass on Members

Galette is a membership management web application for non profit organizations. Starting in version 0.9.6 and prior to version 1.2.0, attackers with group manager role can bypass intended restrictions allowing unauthorized access and changes despite role-based controls. Since it requires privileged access initially, e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:24:10.982Z. Updated 2025-12-19T16:30:00.570Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated19 Dec 2025, 23:30 WIB

Official record

MedPublished 19 Dec 2025, 23:02 WIB

CVE-2025-14954

Open5GS QER/FAR/URR/PDR context.c ogs_pfcp_qer_find_or_add assertion

A vulnerability has been found in Open5GS up to 2.7.6. Affected is the function ogs_pfcp_pdr_find_or_add/ogs_pfcp_far_find_or_add/ogs_pfcp_urr_find_or_add/ogs_pfcp_qer_find_or_add in the library lib/pfcp/context.c of the component QER/FAR/URR/PDR. The manipulation leads to reachable assertion. It is possible to initiat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:02:11.110Z. Updated 2026-02-24T05:56:58.734Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:56 WIB

Official record

LowPublished 19 Dec 2025, 23:02 WIB

CVE-2025-14953

Open5GS FAR-ID handler.c ogs_pfcp_handle_create_pdr null pointer dereference

A flaw has been found in Open5GS up to 2.7.5. This impacts the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component FAR-ID Handler. Executing a manipulation can lead to null pointer dereference. The attack may be performed from remote. The attack requires a high level of complexity. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T16:02:07.234Z. Updated 2026-02-24T05:56:46.475Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 12:56 WIB

Official record

CritPublished 19 Dec 2025, 22:37 WIB

CVE-2025-34433

AVideo < 20.1 Unauthenticated RCE via Predictable Installation Salt

AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vulnerability caused by predictable generation of an installation salt using PHP uniqid(). The installation timestamp is exposed via a public endpoint, and a derived hash identifier is accessible through unauthenticated API responses,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-19T15:37:39.775Z. Updated 2026-06-23T16:13:27.861Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated23 Jun 2026, 23:13 WIB

Official record