Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 1881–1900 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 21 Apr 2026, 22:52 WIB

CVE-2026-40565

FreeScout has Stored XSS / CSS Injection via linkify() — Unescaped URL in Anchor href

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, FreeScout's linkify() function in app/Misc/Helper.php converts plain-text URLs in email bodies into HTML anchor tags without escaping double-quote characters (") in the URL. HTMLPurifier (called first via getCleanBody()) preserves l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T15:52:39.118Z. Updated 2026-04-21T19:48:40.654Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:48 WIB

Official record

UnscoredPublished 21 Apr 2026, 22:34 WIB

CVE-2025-15638

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1881 to 1900 of 5813.First page Next page

Published 2026-04-21T15:34:18.988Z. Updated 2026-04-21T16:23:17.147Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Apr 2026, 23:23 WIB

Official record

UnscoredPublished 21 Apr 2026, 22:26 WIB

CVE-2017-20230

Storable versions before 3.05 for Perl has a stack overflow

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T15:26:18.216Z. Updated 2026-04-21T18:22:25.354Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Apr 2026, 01:22 WIB

Official record

MedPublished 21 Apr 2026, 22:15 WIB

CVE-2025-41011

HTML injection in PHP Point Of Sale

HTML injection vulnerability in PHP Point of Sale v19.4. This vulnerability allows an attacker to render HTML in the victim's browser due to a lack of proper validation of user input by sending a request to '/reports/generate/specific_customer', ussing 'start_date_formatted' y 'end_date_formatted' parameters.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T15:15:31.708Z. Updated 2026-04-21T16:21:50.544Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Apr 2026, 23:21 WIB

Official record

HighPublished 21 Apr 2026, 22:01 WIB

CVE-2026-40498

FreeScout has Authentication Bypass and Information Disclosure in SystemController via /system/cron

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.213, an unauthenticated attacker can access diagnostic and system tools that should be restricted to administrators. The /system/cron endpoint relies on a static MD5 hash derived from the APP_KEY, which is exposed in the response and log…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T15:01:20.216Z. Updated 2026-04-21T19:20:23.159Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:20 WIB

Official record

CritPublished 21 Apr 2026, 21:59 WIB

CVE-2025-41029

SQL injection in Zeon Academy Pro by Zeon Global Tech

SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameter 'phonenumber' in '/private/continue-upload.php'.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:59:40.481Z. Updated 2026-04-21T16:23:02.186Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated21 Apr 2026, 23:23 WIB

Official record

HighPublished 21 Apr 2026, 21:45 WIB

CVE-2026-3298

Out-of-bounds write in Windows asyncio.ProacterEventLoop.sock_recvfrom_into() when using nbytes

The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:45:01.919Z. Updated 2026-08-13T00:27:55.667Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated13 Aug 2026, 07:27 WIB

Official record

MedPublished 21 Apr 2026, 21:42 WIB

CVE-2025-10354

Reflected Cross-Site Scripting (XSS) in Semantic MediaWiki

Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL using the '/index.php/Speciaal:GefacetteerdZoeken' endpoint parameter. This vulnerability can be exploited to steal sensitive…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:42:38.305Z. Updated 2026-04-21T19:25:40.964Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:25 WIB

Official record

MedPublished 21 Apr 2026, 21:26 WIB

CVE-2025-31981

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption

HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access. An attacker with access to the network traffic can sniff packets from the connection and uncover the data.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:26:39.400Z. Updated 2026-04-21T19:28:19.397Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:28 WIB

Official record

HighPublished 21 Apr 2026, 21:22 WIB

CVE-2026-5789

Search path without quotes in CivetWeb

Vulnerability related to an unquoted search path in CivetWeb v1.16. This vulnerability allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path (C:\Program Files\CivetWeb\CivetWeb.exe --), due to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:22:05.872Z. Updated 2026-04-21T19:27:53.853Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:27 WIB

Official record

MedPublished 21 Apr 2026, 21:14 WIB

CVE-2026-1089

User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups

User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:14:58.244Z. Updated 2026-04-21T15:00:35.492Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated21 Apr 2026, 22:00 WIB

Official record

MedPublished 21 Apr 2026, 21:14 WIB

CVE-2026-0972

HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT

HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0. Note: The title, details, and description of this CVE were corrected post-publishing.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:14:38.146Z. Updated 2026-04-29T19:32:13.201Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated30 Apr 2026, 02:32 WIB

Official record

MedPublished 21 Apr 2026, 21:14 WIB

CVE-2026-0971

GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout

An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:14:23.423Z. Updated 2026-04-21T19:26:58.470Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:26 WIB

Official record

HighPublished 21 Apr 2026, 21:14 WIB

CVE-2025-14362

GoAnywhere MFT SFTP Service Login Vulnerable to Brute Force Attack Under Certain Circumstances

The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:14:08.492Z. Updated 2026-04-21T19:33:35.079Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:33 WIB

Official record

MedPublished 21 Apr 2026, 21:10 WIB

CVE-2025-1241

Encryption vulnerable to brute-force decryption in GoAnywhere MFT

Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-force decryption of data.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T14:10:09.505Z. Updated 2026-04-21T19:33:03.005Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:33 WIB

Official record

LowPublished 21 Apr 2026, 20:59 WIB

CVE-2025-31958

HCL BigFix Service Management (SM) is susceptible to HTTP Request Smuggling

HCL BigFix Service Management is susceptible to HTTP Request Smuggling. HTTP request smuggling vulnerabilities arise when websites route HTTP requests through web servers with inconsistent HTTP parsing. HTTP Smuggling exploits inconsistencies in request parsing between front-end and back-end servers, allowing attacker…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T13:59:14.787Z. Updated 2026-04-21T19:32:20.831Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated22 Apr 2026, 02:32 WIB

Official record

UnscoredPublished 21 Apr 2026, 19:41 WIB

CVE-2026-6786

Memory safety bugs fixed in Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T12:41:14.629Z. Updated 2026-07-15T00:40:39.064Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:40 WIB

Official record

UnscoredPublished 21 Apr 2026, 19:41 WIB

CVE-2026-6785

Memory safety bugs fixed in Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird ESR 140.10, Firefox 150 and Thunderbird 150

Memory safety bugs present in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firef…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T12:41:13.980Z. Updated 2026-07-15T00:40:41.733Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:40 WIB

Official record

UnscoredPublished 21 Apr 2026, 19:41 WIB

CVE-2026-6784

Memory safety bugs fixed in Firefox 150 and Thunderbird 150

Memory safety bugs present in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T12:41:13.111Z. Updated 2026-07-15T00:40:44.594Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Jul 2026, 07:40 WIB

Official record

UnscoredPublished 21 Apr 2026, 19:41 WIB

CVE-2026-6783

Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component

Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150 and Thunderbird 150.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-21T12:41:12.492Z. Updated 2026-05-27T17:11:33.086Z.

CVSS—KEVNot listedEPSSPresentUpdated28 May 2026, 00:11 WIB

Official record