Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,302 published records · 16 KEV · 4,302 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,302 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3357.8%
High1,43733%
Med1,74641%
Low1323.1%
None20.05%
Legacy00.00%
Unscored65015%

Matching records by UTC month

Jan 264,302

Signal coverage

KEV-listed: 16
With a forecast: 4,302
Unknown date: 0
Unscored severity: 650

Share of cohort: KEV 0.37% · forecast 100% · unscored 15%.

Showing 101–120 of 4,302By severity band: Critical · 9.0–10.0 335, High · 7.0–8.9 1,437, Medium · 4.0–6.9 1,746, Low · 0.1–3.9 132, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 650

CritPublished 31 Jan 2026, 03:15 WIB

CVE-2026-25130

Cybersecurity AI vulnerable to command Injection through argument injection in find_file Agent tool

Cybersecurity AI (CAI) is a framework for AI Security. In versions up to and including 0.5.10, the CAI (Cybersecurity AI) framework contains multiple argument injection vulnerabilities in its function tools. User-controlled input is passed directly to shell commands via `subprocess.Popen()` with `shell=True`, allowing …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:15:51.772Z. Updated 2026-02-02T18:01:06.518Z.

CVSS9.7v3.1KEVNot listedEPSSPresentUpdated03 Feb 2026, 01:01 WIB

Official record

MedPublished 31 Jan 2026, 03:12 WIB

CVE-2026-25129

PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

PsySH is a runtime developer console, interactive debugger, and REPL for PHP. Prior to versions 0.11.23 and 0.12.19, PsySH automatically loads and executes a `.psysh.php` file from the Current Working Directory (CWD) on startup. If an attacker can write to a directory that a victim later uses as their CWD when launchin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 101 to 120 of 4302.First page Next page

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:12:48.651Z. Updated 2026-02-02T15:45:55.276Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated02 Feb 2026, 22:45 WIB

Official record

CritPublished 31 Jan 2026, 03:11 WIB

CVE-2025-24293

CVE-2025-24293

# Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of potentially unsafe image transformation methods and parameters by default. The default allowed list contains three methods allow for the circumvention of the safe defaults which enables potential com…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:11:15.219Z. Updated 2026-07-15T01:26:46.864Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 08:26 WIB

Official record

MedPublished 31 Jan 2026, 03:04 WIB

CVE-2026-23835

LobeHub Vulnerable to Improper Authorization in Presigned Upload

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnorma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T20:04:23.284Z. Updated 2026-01-30T20:21:57.205Z.

CVSS5.7v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 03:21 WIB

Official record

HighPublished 31 Jan 2026, 02:12 WIB

CVE-2025-11175

DiscussionTools should use better regex

Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T19:12:06.648Z. Updated 2026-01-30T19:29:08.101Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 02:29 WIB

Official record

HighPublished 31 Jan 2026, 01:59 WIB

CVE-2025-62349

Salt Master authentication protocol downgrade may enable minion impersonation

Salt contains an authentication protocol version downgrade weakness that can allow a malicious minion to bypass newer authentication/security features by using an older request payload format, enabling minion impersonation and circumventing protections introduced in response to prior issues.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T18:59:21.990Z. Updated 2026-02-26T15:04:42.050Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 22:04 WIB

Official record

HighPublished 31 Jan 2026, 01:57 WIB

CVE-2025-62348

Salt junos module uses an unsafe YAML loader which may allow unintended code execution

Salt's junos execution module contained an unsafe YAML decode/load usage. A specially crafted YAML payload processed by the junos module could lead to unintended code execution under the context of the Salt process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T18:57:52.056Z. Updated 2026-02-26T15:04:42.356Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 22:04 WIB

Official record

MedPublished 31 Jan 2026, 01:31 WIB

CVE-2024-9432

Cleartext Storage of Sensitive Information vulnerability has been discovered in OpenText™ Vertica.

Cleartext Storage of Sensitive Information vulnerability in OpenText™ Vertica allows Retrieve Embedded Sensitive Data. The vulnerability could read Vertica agent plaintext apikey.This issue affects Vertica versions: 23.X, 24.X, 25.X.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T18:31:31.448Z. Updated 2026-01-30T19:29:53.064Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 02:29 WIB

Official record

LowPublished 31 Jan 2026, 01:06 WIB

CVE-2025-15497

CVE-2025-15497

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of service

Excerpt language: en.

Severity low: primary CNA CVSS 3.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T18:06:07.499Z. Updated 2026-01-30T19:29:24.934Z.

CVSS3.8v4.0KEVNot listedEPSSPresentUpdated31 Jan 2026, 02:29 WIB

Official record

MedPublished 31 Jan 2026, 00:32 WIB

CVE-2026-1702

SourceCodester Pet Grooming Management Software User Management user.php improper authorization

A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Impacted is an unknown function of the file /admin/operation/user.php of the component User Management. Performing a manipulation of the argument group_id results in improper authorization. The attack can be initiated remotely. The exp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T17:32:09.669Z. Updated 2026-02-23T09:11:04.789Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:11 WIB

Official record

MedPublished 31 Jan 2026, 00:32 WIB

CVE-2026-1701

itsourcecode School Management System index.php sql injection

A security vulnerability has been detected in itsourcecode School Management System 1.0. This issue affects some unknown processing of the file /enrollment/index.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T17:32:06.994Z. Updated 2026-02-23T09:10:49.982Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:10 WIB

Official record

MedPublished 31 Jan 2026, 00:02 WIB

CVE-2026-1700

projectworlds House Rental and Property Listing sms.php cross site scripting

A weakness has been identified in projectworlds House Rental and Property Listing 1.0. This vulnerability affects unknown code of the file /app/sms.php. This manipulation of the argument Message causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the publi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T17:02:07.865Z. Updated 2026-02-23T09:10:35.818Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:10 WIB

Official record

MedPublished 31 Jan 2026, 00:02 WIB

CVE-2026-1691

bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization

A vulnerability has been found in bolo-solo up to 2.6.4. This impacts the function importMarkdownsSync of the file src/main/java/org/b3log/solo/bolo/prop/BackupService.java of the component SnakeYAML. Such manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T17:02:06.205Z. Updated 2026-02-23T09:10:21.991Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:10 WIB

Official record

MedPublished 30 Jan 2026, 23:32 WIB

CVE-2026-1690

Tenda HG10 formSysCmd system command injection

A flaw has been found in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. This affects the function system of the file /boaform/formSysCmd. This manipulation of the argument sysCmd causes command injection. The attack may be initiated remotely. The exploit has been published and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:32:11.826Z. Updated 2026-02-23T09:10:09.575Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:10 WIB

Official record

MedPublished 30 Jan 2026, 23:32 WIB

CVE-2026-1689

Tenda HG10 Login formLogin checkUserFromLanOrWan command injection

A vulnerability was detected in Tenda HG10 US_HG7_HG9_HG10re_300001138_en_xpon. The impacted element is the function checkUserFromLanOrWan of the file /boaform/admin/formLogin of the component Login Interface. The manipulation of the argument Host results in command injection. The attack can be launched remotely. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:32:08.118Z. Updated 2026-02-23T09:09:54.959Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated23 Feb 2026, 16:09 WIB

Official record

HighPublished 30 Jan 2026, 23:16 WIB

CVE-2020-37060

Atomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service Path

Atomic Alarm Clock 6.3 contains a local privilege escalation vulnerability in its service configuration that allows attackers to execute arbitrary code with SYSTEM privileges. Attackers can exploit the unquoted service path by placing a malicious executable named 'Program.exe' to gain persistent system-level access.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:16:41.496Z. Updated 2026-01-30T16:34:14.509Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 23:34 WIB

Official record

HighPublished 30 Jan 2026, 23:16 WIB

CVE-2020-37059

Popcorn Time 6.2 - 'Update service' Unquoted Service Path

Popcorn Time 6.2.1.14 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can insert malicious executables in Program Files (x86) or system root directories to be executed with SYSTEM-level permissions during servi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:16:41.069Z. Updated 2026-03-05T01:27:45.712Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated05 Mar 2026, 08:27 WIB

Official record

HighPublished 30 Jan 2026, 23:16 WIB

CVE-2020-37058

Andrea ST Filters Service 1.0.64.7 - Unquoted service path

Andrea ST Filters Service 1.0.64.7 contains an unquoted service path vulnerability in its Windows service configuration. Local attackers can exploit the unquoted path to inject malicious code that will execute with elevated LocalSystem privileges during service startup.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:16:40.639Z. Updated 2026-01-30T16:33:33.288Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated30 Jan 2026, 23:33 WIB

Official record

HighPublished 30 Jan 2026, 23:16 WIB

CVE-2020-37030

Outline Service 1.3.3 - 'Outline Service ' Unquoted Service Path

Outline Service 1.3.3 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in C:\Program Files (x86)\Outline to inject malicious code that would execute with LocalSystem permissions d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:16:40.176Z. Updated 2026-03-05T01:27:33.211Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated05 Mar 2026, 08:27 WIB

Official record

MedPublished 30 Jan 2026, 23:16 WIB

CVE-2020-37022

OpenZ ERP 3.6.60 - Persistent Cross-Site Scripting

OpenZ ERP 3.6.60 contains a persistent cross-site scripting vulnerability in the Employee module's name and description parameters. Attackers can inject malicious scripts through POST requests to , enabling session hijacking and manipulation of application modules.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-30T16:16:39.547Z. Updated 2026-03-05T01:27:31.513Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated05 Mar 2026, 08:27 WIB

Official record