Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 1261–1280 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57203

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a multipart/form-data POST request…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-24T19:08:03.016Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Sep 2025, 02:08 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57204

CVE-2025-57204

Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulnerability within the Products module available to authenticated users. The vulnerability resides in the product name parameter submitted to the product-creation endpoint via a standard POST form. Due t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1261 to 1280 of 4319.First page Next page

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-24T14:18:00.528Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:18 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57205

CVE-2025-57205

iNiLabs School Express (SMS Express) 6.2 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/{id} endpoint (and similarly in Notice and Pages editors…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-24T19:06:13.819Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Sep 2025, 02:06 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57430

CVE-2025-57430

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:35.324Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57431

CVE-2025-57431

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:36:19.061Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:36 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57432

CVE-2025-57432

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to int…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:29.967Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57433

CVE-2025-57433

The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability. By sending a crafted POST request to a specific endpoint (/cwi/ajax_request/get_data.php), an authenticated attacker (even with a low-privileged account like guest) can retrieve the hashed passwords for the admin, manager, a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:40.814Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57434

CVE-2025-57434

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:29:10.145Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:29 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57437

CVE-2025-57437

The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream pl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:49:40.482Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:49 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57438

CVE-2025-57438

The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifying requests.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:46:09.147Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:46 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57439

CVE-2025-57439

Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An authenticated attacker can inject arbitrary Lua code into the configuration, which is then executed on the server. This allows full system compromise, including reverse shell execution or arbi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:59:57.367Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:59 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57440

CVE-2025-57440

The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext commands for controlling streaming, recording, formatting storage devices, and system reboot. This interface, referred to as the "ATEM Ethernet Protocol 1.0", provides complete device contro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-10-28T20:09:54.728Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Oct 2025, 03:09 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57441

CVE-2025-57441

The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990. Upon connection, the attacker can access a protocol preamble that leaks the video mode, routing configuration, input/output labels, device model, and even internal identifie…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T17:41:16.675Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Sep 2025, 00:41 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57601

CVE-2025-57601

AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target device. The device th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:57.262Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57602

CVE-2025-57602

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the cloud controller, gain interactive shell access, and pivot into other connected IoT devices. This can lead to remote code ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:51.775Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57605

CVE-2025-57605

Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their privileges by assigning themselves as admins of other departments. This results in unauthorized privilege escalation across the department

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-23T18:13:46.418Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:13 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57682

CVE-2025-57682

Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T15:53:51.372Z.

CVSS—KEVNot listedEPSSPresentUpdated22 Sep 2025, 22:53 WIB

Official record

UnscoredPublished 22 Sep 2025, 07:00 WIB

CVE-2025-57685

CVE-2025-57685

The LB-Link routers, including the BL-AC2100_AZ3 V1.0.4, BL-WR4000 v2.5.0, BL-WR9000_AE4 v2.4.9, BL-AC1900_AZ2 v1.0.2, BL-X26_AC8 v1.2.8, and BL-LTE300_DA4 V1.2.3 models, are vulnerable to unauthorized command injection. Attackers can exploit this vulnerability by accessing the /goform/set_serial_cfg interface to gain …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2026-07-05T01:13:37.993Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:13 WIB

Official record

MedPublished 22 Sep 2025, 07:00 WIB

CVE-2025-59797

CVE-2025-59797

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-09-22T15:37:43.428Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated22 Sep 2025, 22:37 WIB

Official record

MedPublished 22 Sep 2025, 07:00 WIB

CVE-2025-59798

CVE-2025-59798

Artifex Ghostscript through 10.05.1 has a stack-based buffer overflow in pdf_write_cmap in devices/vector/gdevpdtw.c.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-22T00:00:00.000Z. Updated 2025-11-03T17:45:20.873Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated04 Nov 2025, 00:45 WIB

Official record