Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 241–260 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65276

CVE-2025-65276

An unauthenticated administrative access vulnerability exists in the open-source HashTech project (https://github.com/henzljw/hashtech) 1.0 thru commit 5919decaff2681dc250e934814fc3a35f6093ee5 (2021-07-02). Due to missing authentication checks on /admin_index.php, an attacker can directly access the admin dashboard wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2025-12-01T19:15:42.318Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Dec 2025, 02:15 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65278

CVE-2025-65278

An issue was discovered in file users.json in GroceryMart commit 21934e6 (2020-10-23) allowing unauthenticated attackers to gain sensitive information including plaintext usernames and passwords.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2025-11-28T16:59:39.172Z.

Showing 241 to 260 of 3020.First page Next page

CVSS—

KEVNot listed

EPSSPresent

Updated28 Nov 2025, 23:59 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65669

CVE-2025-65669

An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2026-07-05T01:20:59.793Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:20 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65670

CVE-2025-65670

An Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows students to access sensitive admin/teacher endpoints by manipulating course IDs in URLs, resulting in unauthorized disclosure of sensitive course, admin, and student data. The leak occurs momentarily before the system reverts to a normal state rest…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2026-07-05T01:21:07.589Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:21 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65672

CVE-2025-65672

Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2026-07-05T01:21:11.465Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:21 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65675

CVE-2025-65675

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2026-07-05T01:21:15.293Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:21 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65676

CVE-2025-65676

Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2026-07-05T01:21:19.395Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:21 WIB

Official record

UnscoredPublished 26 Nov 2025, 07:00 WIB

CVE-2025-65681

CVE-2025-65681

An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:00:00.000Z. Updated 2025-11-28T21:01:18.964Z.

CVSS—KEVNot listedEPSSPresentUpdated29 Nov 2025, 04:01 WIB

Official record

MedPublished 26 Nov 2025, 06:38 WIB

CVE-2025-65963

CFiles Unauthorized Folder/ZIP Access in Public Spaces

Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has been patched in versions 0…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T23:38:49.198Z. Updated 2025-11-26T16:13:16.288Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:13 WIB

Official record

MedPublished 26 Nov 2025, 06:38 WIB

CVE-2025-66019

pypdf manipulated LZWDecode streams can exhaust RAM

pypdf is a free and open-source pure-python PDF library. Prior to version 6.4.0, an attacker who uses this vulnerability can craft a PDF which leads to a memory usage of up to 1 GB per stream. This requires parsing the content stream of a page using the LZWDecode filter. This issue has been patched in version 6.4.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T23:38:12.473Z. Updated 2026-01-20T18:33:02.928Z.

CVSS6.6v4.0KEVNot listedEPSSPresentUpdated21 Jan 2026, 01:33 WIB

Official record

HighPublished 26 Nov 2025, 06:33 WIB

CVE-2025-65957

Core Bot is Leaking Sensitive Credentials in Logs, Errors, and Messages

Core Bot Is an Open Source discord bot made for maple hospital servers. Prior to commit dffe050, the API keys (SUPABASE_API_KEY, TOKEN) are loaded using environment variables, but there are cases in code (error handling, summaries, webhooks) where configuration summaries may inadvertently leak sensitive data (e.g., by …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T23:33:09.921Z. Updated 2025-11-26T16:11:42.244Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:11 WIB

Official record

MedPublished 26 Nov 2025, 06:20 WIB

CVE-2025-65956

Formwork CMS Has a Stored Cross-Site Scripting (XSS) Vulnerability in Blog Tags

Formwork is a flat file-based Content Management System (CMS). Prior to version 2.2.0, inserting unsanitized data into the blog tag field results in stored cross‑site scripting (XSS). Any user with credentials to the Formwork CMS who accesses or edits an affected blog post will have attacker‑controlled script executed …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T23:20:23.965Z. Updated 2025-11-26T16:11:03.718Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:11 WIB

Official record

MedPublished 26 Nov 2025, 06:13 WIB

CVE-2025-65953

NanoMQ UAF of retain message due to invalid MQTTV5 properties

NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform. Prior to version 0.22.5, a Heap-Use-After-Free (UAF) vulnerability exists in the TCP transport component of NanoMQ, which relies on the underlying NanoNNG library (specifically in src/sp/transport/mqtt/broker_tcp.c). The vulnerability is due to impro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T23:13:09.619Z. Updated 2025-11-26T16:10:11.478Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:10 WIB

Official record

HighPublished 26 Nov 2025, 05:54 WIB

CVE-2025-65952

Console is vulnerable to path traversal regarding custom assets

Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists where complicated combinations of backslashes and periods can be used to escape the Gorilla Tag path and write to unwanted directories. This issue has been patched i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:54:24.363Z. Updated 2025-11-26T16:09:37.490Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:09 WIB

Official record

CritPublished 26 Nov 2025, 05:28 WIB

CVE-2025-13597

AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

The AI Feeds plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.0.11. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the affe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:28:37.000Z. Updated 2026-04-08T17:20:47.429Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:20 WIB

Official record

CritPublished 26 Nov 2025, 05:28 WIB

CVE-2025-13595

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

The CIBELES AI plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check in the 'actualizador_git.php' file in all versions up to, and including, 1.10.8. This makes it possible for unauthenticated attackers to download arbitrary GitHub repositories and overwrite plugin files on the af…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:28:36.431Z. Updated 2026-04-08T17:16:50.477Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:16 WIB

Official record

LowPublished 26 Nov 2025, 05:25 WIB

CVE-2025-65942

VictoriaMetrics Snappy Decoder DoS Vulnerability is Causing OOM

VictoriaMetrics is a scalable solution for monitoring and managing time series data. In versions from 1.0.0 to before 1.110.23, from 1.111.0 to before 1.122.8, and from 1.123.0 to before 1.129.1, affected versions are vulnerable to DoS attacks because the snappy decoder ignored VictoriaMetrics request size limits allow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:25:46.021Z. Updated 2025-11-26T14:53:28.564Z.

CVSS2.7v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:53 WIB

Official record

MedPublished 26 Nov 2025, 05:13 WIB

CVE-2025-64713

WebAssembly Micro Runtime frame_offset_bottom array bounds overflow in fast Interpreter mode when handling GET_GLOBAL(I32) followed by if opcode

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, an out-of-bounds array access issue exists in WAMR's fast interpreter mode during WASM bytecode loading. When frame_ref_bottom and frame_offset_bottom arrays are at capacity and a GET_GLOBAL(I32) opcode is e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:13:47.662Z. Updated 2025-11-26T14:50:41.885Z.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:50 WIB

Official record

MedPublished 26 Nov 2025, 05:06 WIB

CVE-2025-64704

WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction

WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. Prior to version 2.4.4, WAMR is susceptible to a segmentation fault in v128.store instruction. This issue has been patched in version 2.4.4.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T22:06:46.582Z. Updated 2025-11-26T16:03:41.819Z.

CVSS4.7v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:03 WIB

Official record

MedPublished 26 Nov 2025, 04:52 WIB

CVE-2025-21621

GeoServer Reflected Cross-Site Scripting (XSS) vulnerability in WMS GetFeatureInfo HTML format

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XSS) vulnerability exists in the WMS GetFeatureInfo HTML output format that enables a remote attacker to execute arbitrary JavaScript code in a victim's browser through spec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T21:52:11.598Z. Updated 2025-11-26T16:03:05.272Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:03 WIB

Official record