Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 1201–1220 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-104353

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:36.381Z. Updated 2026-10-27T17:03:36.381Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-105780

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1201 to 1220 of 16156.First page Next page

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:36.035Z. Updated 2026-10-27T17:03:36.035Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-105489

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:35.705Z. Updated 2026-10-28T13:44:41.171Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 20:44 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-104350

Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user intera…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:34.960Z. Updated 2026-10-27T17:03:34.960Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-105781

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL commands, potentially …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:34.741Z. Updated 2026-10-27T17:03:34.741Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-104351

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does n…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:34.527Z. Updated 2026-10-27T17:03:34.527Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-104354

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:34.305Z. Updated 2026-10-28T16:14:22.371Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:14 WIB

Official record

CritPublished 28 Oct 2026, 00:03 WIB

CVE-2026-105779

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:03:34.085Z. Updated 2026-10-27T17:03:34.085Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:03 WIB

Official record

MedPublished 28 Oct 2026, 00:00 WIB

CVE-2026-117514

oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection

A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customer_detail.php of the component Admin Record Pages. The manipulation of the argument costomer_id/ticket_id/emp_id/salary_id/page_id leads to sql injection. It is possible to initiate t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T17:00:16.415Z. Updated 2026-10-27T17:00:16.415Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 00:00 WIB

Official record

LowPublished 27 Oct 2026, 23:59 WIB

CVE-2026-57189

Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` out-of-bounds write during `generation accumulation` using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The `chan_si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:59:46.057Z. Updated 2026-10-28T16:14:48.359Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:14 WIB

Official record

HighPublished 27 Oct 2026, 23:56 WIB

CVE-2026-57201

Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 `ooTrace()` trace-logging function can occur when unbounded `vsprintf` writes into a fixed `2048-byte buffer`…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:56:37.203Z. Updated 2026-10-27T16:56:37.203Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:56 WIB

Official record

HighPublished 27 Oct 2026, 23:53 WIB

CVE-2026-114598

Access of resource using incompatible type ('type confusion') in EPICS Base

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:53:28.775Z. Updated 2026-10-27T16:53:28.775Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:53 WIB

Official record

CritPublished 27 Oct 2026, 23:53 WIB

CVE-2026-108015

eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

Private keys for eight eMudhra intermediate CA certificates have been compromised https://emudhra.we-have-a-problem.com/ , which impacts certificate trust for outbound network request features of HCL Notes Client. An unauthenticated network attacker could spoof server certificates to execute a man in the middle (MITM…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:53:19.893Z. Updated 2026-10-27T20:29:23.260Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 03:29 WIB

Official record

MedPublished 27 Oct 2026, 23:52 WIB

CVE-2026-57194

Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an out-of-bounds write in `chan_unistim` `DIALPAGE` digit handling can overflow the `phone_number` field and crash Asterisk when an attacker sends…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:52:47.225Z. Updated 2026-10-27T16:52:47.225Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:52 WIB

Official record

HighPublished 27 Oct 2026, 23:51 WIB

CVE-2026-114597

Improper handling of length parameter inconsistency in EPICS Base

In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the bounds of an allocated buffer. This may lead to denial of service and could expose adjacent memory contents.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:51:59.240Z. Updated 2026-10-27T16:51:59.240Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:51 WIB

Official record

HighPublished 27 Oct 2026, 23:50 WIB

CVE-2026-114596

Integer overflow or wraparound in EPICS Base

In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:50:09.514Z. Updated 2026-10-27T16:50:09.514Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:50 WIB

Official record

CritPublished 27 Oct 2026, 23:48 WIB

CVE-2026-114595

Integer overflow or wraparound in EPICS Base

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:48:37.138Z. Updated 2026-10-27T16:48:37.138Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:48 WIB

Official record

LowPublished 27 Oct 2026, 23:47 WIB

CVE-2026-57198

Asterisk: Possible RED T.140 Heap Buffer Overflow

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a `T.140 RED` heap buffer overflow using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to crash. The `chan_sip` channel driver must be instal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:47:20.717Z. Updated 2026-10-27T16:47:20.717Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:47 WIB

Official record

HighPublished 27 Oct 2026, 23:47 WIB

CVE-2026-116675

TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization

TinyMCE is an open source rich text editor. From 7.9.3 until 7.9.4 and from 8.5.1 until 8.9.3, the media plugin creates elements crafted through data-mce-object in the active document before sanitization. Those elements can execute malicious scripts during processing, resulting in stored cross-site scripting for users …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:47:01.183Z. Updated 2026-10-28T16:15:12.999Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated28 Oct 2026, 23:15 WIB

Official record

MedPublished 27 Oct 2026, 23:45 WIB

CVE-2026-117513

oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection

A vulnerability was determined in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/customer_search.php of the component Admin Search Pages. Executing a manipulation of the argument customer_name/voucher_no/emp_name can lead to sql injection. The attack may be performed from …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-27T16:45:10.269Z. Updated 2026-10-27T16:45:10.269Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Oct 2026, 23:45 WIB

Official record