Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 1141–1160 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

HighPublished 17 Dec 2024, 22:28 WIB

CVE-2024-12670

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:28:05.933Z. Updated 2025-08-26T17:17:03.296Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2025, 00:17 WIB

Official record

HighPublished 17 Dec 2024, 22:27 WIB

CVE-2024-12669

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1141 to 1160 of 3433.First page Next page

Published 2024-12-17T15:27:17.052Z. Updated 2025-08-26T17:16:46.311Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2025, 00:16 WIB

Official record

HighPublished 17 Dec 2024, 22:26 WIB

CVE-2024-12200

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:26:28.404Z. Updated 2025-08-26T16:56:42.734Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:56 WIB

Official record

HighPublished 17 Dec 2024, 22:24 WIB

CVE-2024-12199

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:24:15.296Z. Updated 2025-08-26T16:56:27.244Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:56 WIB

Official record

HighPublished 17 Dec 2024, 22:22 WIB

CVE-2024-12198

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:22:49.565Z. Updated 2025-08-26T16:56:00.736Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:56 WIB

Official record

HighPublished 17 Dec 2024, 22:21 WIB

CVE-2024-12197

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:21:43.044Z. Updated 2025-08-26T16:55:38.680Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:55 WIB

Official record

HighPublished 17 Dec 2024, 22:20 WIB

CVE-2024-12194

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:20:17.674Z. Updated 2025-08-26T16:55:20.829Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:55 WIB

Official record

HighPublished 17 Dec 2024, 22:19 WIB

CVE-2024-12179

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:19:29.587Z. Updated 2025-08-26T16:53:27.682Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:53 WIB

Official record

HighPublished 17 Dec 2024, 22:18 WIB

CVE-2024-12193

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:18:38.961Z. Updated 2025-08-26T16:54:55.956Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:54 WIB

Official record

HighPublished 17 Dec 2024, 22:17 WIB

CVE-2024-12192

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:17:56.627Z. Updated 2025-08-26T16:54:28.551Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:54 WIB

Official record

HighPublished 17 Dec 2024, 22:17 WIB

CVE-2024-12191

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:17:15.621Z. Updated 2025-08-26T16:53:52.322Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:53 WIB

Official record

HighPublished 17 Dec 2024, 22:16 WIB

CVE-2024-10476

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information (PHI) and personally identifiable information (PII). Exploitation of this vulnerability may al…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:16:44.982Z. Updated 2024-12-17T15:35:43.490Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated17 Dec 2024, 22:35 WIB

Official record

HighPublished 17 Dec 2024, 22:16 WIB

CVE-2024-12178

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:16:31.988Z. Updated 2026-01-22T14:21:21.091Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated22 Jan 2026, 21:21 WIB

Official record

HighPublished 17 Dec 2024, 22:15 WIB

CVE-2024-11422

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T15:15:17.614Z. Updated 2025-08-26T16:51:33.111Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 23:51 WIB

Official record

CritPublished 17 Dec 2024, 20:40 WIB

CVE-2024-8972

SQLi in Mobil365 Informatics' Saha365 App

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T13:40:09.478Z. Updated 2026-06-02T07:51:42.900Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated02 Jun 2026, 14:51 WIB

Official record

MedPublished 17 Dec 2024, 19:55 WIB

CVE-2024-9819

IDOR in NextGEO's NG Analyser

Authorization Bypass Through User-Controlled Key vulnerability in NextGeography NG Analyser allows Functionality Misuse. This issue affects NG Analyser: before 2.2.711.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T12:55:32.225Z. Updated 2026-06-02T06:56:08.601Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated02 Jun 2026, 13:56 WIB

Official record

MedPublished 17 Dec 2024, 19:43 WIB

CVE-2024-10356

ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates

The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in inc/Widgets/accordion/output/content.php. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive private, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T12:43:38.479Z. Updated 2026-04-08T17:15:58.724Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:15 WIB

Official record

UnscoredPublished 17 Dec 2024, 19:35 WIB

CVE-2024-54677

Apache Tomcat: DoS in examples web application

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. The following versions were EOL at the time the CVE was …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T12:35:50.948Z. Updated 2025-11-03T19:32:11.848Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 02:32 WIB

Official record

UnscoredPublished 17 Dec 2024, 19:34 WIB

CVE-2024-50379

Apache Tomcat: RCE due to TOCTOU issue in JSP compilation

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T12:34:54.827Z. Updated 2025-11-03T20:45:15.148Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:45 WIB

Official record

MedPublished 17 Dec 2024, 18:42 WIB

CVE-2024-8475

Protection Mechanism Failure in Digital Operation Services' WiFiBurada

Authentication Bypass by Assumed-Immutable Data vulnerability in Digital Operation Services WiFiBurada allows Manipulating User-Controlled Variables. This issue affects WiFiBurada: before 1.0.5.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-17T11:42:03.959Z. Updated 2026-06-02T08:04:29.959Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated02 Jun 2026, 15:04 WIB

Official record