Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 1041–1060 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

MedPublished 18 Nov 2025, 07:02 WIB

CVE-2025-13323

code-projects Simple Pizza Ordering System listorder.php sql injection

A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:02:09.376Z. Updated 2025-11-18T16:35:55.240Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 23:35 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-54320

CVE-2025-54320

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T13:32:35.878Z.

Showing 1041 to 1060 of 3020.First page Next page

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 20:32 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-54321

CVE-2025-54321

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating reset password requests.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T16:49:48.558Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 23:49 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-55796

CVE-2025-55796

The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup confirmation, password resets, email confirmation resends, and email change confirmation. These tokens are generated by hashing the current timestamp formatted as "%d %H:%M:%S" withou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-18T17:11:57.544Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 00:11 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-56499

CVE-2025-56499

Incorrect access control in mihomo v1.19.11 allows authenticated attackers with low-level privileges to read arbitrary files with elevated privileges via obtaining the external control key from the config file.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T13:33:49.717Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 20:33 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-56526

CVE-2025-56526

Cross site scripting (XSS) vulnerability in Kotaemon 0.11.0 allowing attackers to execute arbitrary code via a crafted PDF.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T14:43:49.889Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:43 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-56527

CVE-2025-56527

Plaintext password storage in Kotaemon 0.11.0 in the client's localStorage.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T14:45:12.432Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:45 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-56643

CVE-2025-56643

Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, previously issued tokens remain valid and can be reused to access the system, even after logout. This behavior affects session integrity and may allow unauthorized access if a token is compromised. The i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T16:50:05.856Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 23:50 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-60455

CVE-2025-60455

Unsafe Deserialization vulnerability in Modular Max Serve before 25.6, specifically when the "--experimental-enable-kvcache-agent" feature is used allowing attackers to execute arbitrary code.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T18:47:17.159Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Nov 2025, 01:47 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63215

CVE-2025-63215

The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T15:40:44.348Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 22:40 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63216

CVE-2025-63216

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and network…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T14:46:56.651Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:46 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63217

CVE-2025-63217

The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks ar…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T14:32:15.920Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:32 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63225

CVE-2025-63225

The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T18:50:14.448Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Nov 2025, 01:50 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63226

CVE-2025-63226

The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper session management on the /UserManagement.html endpoint. Attackers who are on the same network as the victim and have access to the target's logged-in session can access the endpoint …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T18:52:23.807Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Nov 2025, 01:52 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63227

CVE-2025-63227

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This allows the attacker t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T15:46:24.479Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 22:46 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63228

CVE-2025-63228

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T15:45:32.208Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 22:45 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63229

CVE-2025-63229

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's browser, potentially st…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-19T14:09:03.395Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:09 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63258

CVE-2025-63258

A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points (versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS, WAP662-WPT330-R2262, WAP662H-WPT330-R…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2026-07-05T01:20:18.488Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:20 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63408

CVE-2025-63408

Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-18T17:00:51.156Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 00:00 WIB

Official record

UnscoredPublished 18 Nov 2025, 07:00 WIB

CVE-2025-63512

CVE-2025-63512

kishan0725 Hospital Management System/ v4 is vulnerable to SQL Injection in admin-panel1.php, specifically in the deleting doctor logic. The application fails to properly sanitize or parameterize user-supplied input from the demail parameter before incorporating it directly into a dynamic SQL query.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T00:00:00.000Z. Updated 2025-11-18T17:11:03.228Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Nov 2025, 00:11 WIB

Official record