Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 1881–1900 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

LowPublished 16 Sep 2025, 23:44 WIB

CVE-2025-59161

In Element Web and Element Desktop, a malicious room can hide an unrelated room and cause it to be left when the malicious room is left

Element Web is a Matrix web client built using the Matrix React SDK. Element Web and Element Desktop before version 1.11.112 have insufficient validation of room predecessor links, allowing a remote attacker to attempt to impermanently replace a room's entry in the room list with an unrelated attacker-supplied room. Wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:44:15.660Z. Updated 2025-09-16T18:26:26.341Z.

CVSS2.7v4.0KEVNot listedEPSSPresentUpdated17 Sep 2025, 01:26 WIB

Official record

HighPublished 16 Sep 2025, 23:41 WIB

CVE-2025-10492

Jaspersoft Library Deserialisation Vulnerability

A Java deserialisation vulnerability has been discovered in Jaspersoft Library. Improper handling of externally supplied data may allow attackers to execute arbitrary code remotely on systems that use the affected library

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1881 to 1900 of 4319.First page Next page

Published 2025-09-16T16:41:44.931Z. Updated 2026-02-10T18:12:20.433Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated11 Feb 2026, 01:12 WIB

Official record

LowPublished 16 Sep 2025, 23:37 WIB

CVE-2025-59160

matrix-js-sdk has insufficient validation when considering a room to be upgraded by another

Matrix JavaScript SDK is a Matrix Client-Server SDK for JavaScript and TypeScript. matrix-js-sdk before 38.2.0 has insufficient validation of room predecessor links in MatrixClient::getJoinedRooms, allowing a remote attacker to attempt to replace a tombstoned room with an unrelated attacker-supplied room. The issue has…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:37:54.185Z. Updated 2025-09-16T18:26:33.217Z.

CVSS2.7v4.0KEVNot listedEPSSPresentUpdated17 Sep 2025, 01:26 WIB

Official record

MedPublished 16 Sep 2025, 23:29 WIB

CVE-2025-58174

LAM profile editor stored cross-site scripting vulnerability

LDAP Account Manager (LAM) is a webfrontend for managing entries stored in an LDAP directory. LAM before 9.3 allows stored cross-site scripting in the Profile section via the profile name field, which renders untrusted input as HTML and executes a supplied script (for example a script element). An authenticated user wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:29:37.615Z. Updated 2025-09-16T18:26:38.482Z.

CVSS4.6v3.1KEVNot listedEPSSPresentUpdated17 Sep 2025, 01:26 WIB

Official record

HighPublished 16 Sep 2025, 23:23 WIB

CVE-2025-59050

Greenshot — Insecure .NET deserialization via WM_COPYDATA enables local code execution

Greenshot is an open source Windows screenshot utility. Greenshot 1.3.300 and earlier deserializes attacker-controlled data received in a WM_COPYDATA message using BinaryFormatter.Deserialize without prior validation or authentication, allowing a local process at the same integrity level to trigger arbitrary code execu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:23:37.866Z. Updated 2025-09-16T18:26:45.315Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated17 Sep 2025, 01:26 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53334

USB: chipidea: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: USB: chipidea: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:09.226Z. Updated 2026-05-11T19:42:56.350Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

HighPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53333

netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one Eric Dumazet says: nf_conntrack_dccp_packet() has an unique: dh = skb_header_pointer(skb, dataoff, sizeof(_dh), &_dh); And nothing more is 'pulled' from the pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:08.427Z. Updated 2026-08-05T09:13:33.368Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53332

genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask()

In the Linux kernel, the following vulnerability has been resolved: genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() If ipi_send_{mask|single}() is called with an invalid interrupt number, all the local variables there will be NULL. ipi_send_verify() which is invoked from these functions does verify…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:07.573Z. Updated 2026-05-11T19:42:54.034Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

HighPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53331

pstore/ram: Check start of empty przs during init

In the Linux kernel, the following vulnerability has been resolved: pstore/ram: Check start of empty przs during init After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that the buffer_size is zero (regardless of the buffer start pos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:06.788Z. Updated 2026-08-05T09:13:32.268Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53330

caif: fix memory leak in cfctrl_linkup_request()

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrl_linkup_request() When linktype is unknown or kzalloc failed in cfctrl_linkup_request(), pkt is not released. Add release process to error path.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:06.005Z. Updated 2026-05-11T19:42:51.796Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53329

workqueue: fix data race with the pwq->stats[] increment

In the Linux kernel, the following vulnerability has been resolved: workqueue: fix data race with the pwq->stats[] increment KCSAN has discovered a data race in kernel/workqueue.c:2598: [ 1863.554079] ================================================================== [ 1863.554118] BUG: KCSAN: data-race in process_o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:05.196Z. Updated 2026-05-11T19:42:50.647Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53328

fs/ntfs3: Enhance sanity check while generating attr_list

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Enhance sanity check while generating attr_list ni_create_attr_list uses WARN_ON to catch error cases while generating attribute list, which only prints out stack trace and may not be enough. This repalces them with more proper error handli…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:04.352Z. Updated 2026-05-11T19:42:49.421Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53327

iommufd/selftest: Catch overflow of uptr and length

In the Linux kernel, the following vulnerability has been resolved: iommufd/selftest: Catch overflow of uptr and length syzkaller hits a WARN_ON when trying to have a uptr close to UINTPTR_MAX: WARNING: CPU: 1 PID: 393 at drivers/iommu/iommufd/selftest.c:403 iommufd_test+0xb19/0x16f0 Modules linked in: CPU: 1 …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:03.417Z. Updated 2026-05-11T19:42:48.281Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53326

powerpc: Don't try to copy PPR for task with NULL pt_regs

In the Linux kernel, the following vulnerability has been resolved: powerpc: Don't try to copy PPR for task with NULL pt_regs powerpc sets up PF_KTHREAD and PF_IO_WORKER with a NULL pt_regs, which from my (arguably very short) checking is not commonly done for other archs. This is fine, except when PF_IO_WORKER's hav…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:01.464Z. Updated 2026-05-11T19:42:46.968Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:12 WIB

CVE-2023-53325

drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer()

In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() Change logging from drm_{err,info}() to dev_{err,info}() in functions mtk_dp_aux_transfer() and mtk_dp_aux_do_transfer(): this will be essential to avoid getting NULL pointer kernel pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:12:00.595Z. Updated 2026-05-11T19:42:45.842Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:11 WIB

CVE-2023-53324

drm/msm/mdp5: Don't leak some plane state

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp5: Don't leak some plane state Apparently no one noticed that mdp5 plane states leak like a sieve ever since we introduced plane_state->commit refcount a few years ago in 21a01abbe32a ("drm/atomic: Fix freeing connector/plane state too ear…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:11:59.672Z. Updated 2026-05-11T19:42:44.716Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:11 WIB

CVE-2023-53323

ext2/dax: Fix ext2_setsize when len is page aligned

In the Linux kernel, the following vulnerability has been resolved: ext2/dax: Fix ext2_setsize when len is page aligned PAGE_ALIGN(x) macro gives the next highest value which is multiple of pagesize. But if x is already page aligned then it simply returns x. So, if x passed is 0 in dax_zero_range() function, that mea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:11:58.877Z. Updated 2026-05-11T19:42:43.589Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

HighPublished 16 Sep 2025, 23:11 WIB

CVE-2023-53322

scsi: qla2xxx: Wait for io return on terminate rport

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Wait for io return on terminate rport System crash due to use after free. Current code allows terminate_rport_io to exit before making sure all IOs has returned. For FCP-2 device, IO's can hang on in HW because driver has not tear down…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:11:58.062Z. Updated 2026-08-05T09:13:31.190Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

HighPublished 16 Sep 2025, 23:11 WIB

CVE-2023-53321

wifi: mac80211_hwsim: drop short frames

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: drop short frames While technically some control frames like ACK are shorter and end after Address 1, such frames shouldn't be forwarded through wmediumd or similar userspace, so require the full 3-address header to avoid access…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:11:57.206Z. Updated 2026-08-05T09:13:30.113Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 16 Sep 2025, 23:11 WIB

CVE-2023-53320

scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info()

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() The function mpi3mr_get_all_tgt_info() has four issues: 1) It calculates valid entry length in alltgt_info assuming the header part of the struct mpi3mr_device_map_info would equal to sizeof(u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T16:11:56.323Z. Updated 2026-05-11T19:42:40.099Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record