Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2561–2580 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39797

xfrm: Duplicate SPI Handling

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRM_MSG_ALLOCSPI Netlink message, which triggers the kernel function xfrm_alloc_spi(). This function is expected to ensure uniqueness of the Security Parameter Index (SPI…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:59:33.639Z. Updated 2026-05-11T21:36:28.556Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:36 WIB

Official record

UnscoredPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39796

net: lapbether: ignore ops-locked netdevs

In the Linux kernel, the following vulnerability has been resolved: net: lapbether: ignore ops-locked netdevs Syzkaller managed to trigger lock dependency in xsk_notify via register_netdevice. As discussed in [0], using register_netdevice in the notifiers is problematic so skip adding lapbeth for ops-locked devices. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2561 to 2580 of 4319.First page Next page

Published 2025-09-12T15:59:32.871Z. Updated 2026-05-11T21:36:27.385Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:36 WIB

Official record

UnscoredPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39795

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:59:32.037Z. Updated 2026-10-15T01:08:22.910Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:08 WIB

Official record

UnscoredPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39794

ARM: tegra: Use I/O memcpy to write to IRAM

In the Linux kernel, the following vulnerability has been resolved: ARM: tegra: Use I/O memcpy to write to IRAM Kasan crashes the kernel trying to check boundaries when using the normal memcpy.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:59:31.226Z. Updated 2026-05-12T12:07:04.300Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 19:07 WIB

Official record

HighPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39793

io_uring/memmap: cast nr_pages to size_t before shifting

In the Linux kernel, the following vulnerability has been resolved: io_uring/memmap: cast nr_pages to size_t before shifting If the allocated size exceeds UINT_MAX, then it's necessary to cast the mr->nr_pages value to size_t to prevent it from overflowing. In practice this isn't much of a concern as the required mem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:59:30.388Z. Updated 2026-08-05T12:05:14.029Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:05 WIB

Official record

HighPublished 12 Sep 2025, 22:59 WIB

CVE-2025-39792

dm: Always split write BIOs to zoned device limits

In the Linux kernel, the following vulnerability has been resolved: dm: Always split write BIOs to zoned device limits Any zoned DM target that requires zone append emulation will use the block layer zone write plugging. In such case, DM target drivers must not split BIOs using dm_accept_partial_bio() as doing so can…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:59:29.477Z. Updated 2026-10-15T22:02:32.065Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 05:02 WIB

Official record

MedPublished 12 Sep 2025, 22:02 WIB

CVE-2025-10319

JeecgBoot Tenant Log Export exportLog improper authorization

A security flaw has been discovered in JeecgBoot up to 3.8.2. Affected by this issue is some unknown functionality of the file /sys/tenant/exportLog of the component Tenant Log Export. The manipulation results in improper authorization. The attack can be launched remotely. The exploit has been released to the public an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T15:02:07.197Z. Updated 2025-09-12T15:40:36.782Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 22:40 WIB

Official record

CritPublished 12 Sep 2025, 20:48 WIB

CVE-2025-10364

Unauthenticated Arbitrary Command Injection in Evertz SDVN

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The app…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:48:18.818Z. Updated 2025-09-12T13:57:32.368Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:57 WIB

Official record

CritPublished 12 Sep 2025, 20:46 WIB

CVE-2025-10365

Authentication Bypass in Evertz SDVN

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The app…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:46:11.776Z. Updated 2025-09-12T13:58:49.025Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:58 WIB

Official record

UnscoredPublished 12 Sep 2025, 20:45 WIB

CVE-2025-9556

CVE-2025-9556

Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a statement into a prompt…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:45:14.684Z. Updated 2025-11-03T18:14:18.939Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 01:14 WIB

Official record

MedPublished 12 Sep 2025, 20:10 WIB

CVE-2025-59058

httpsig-rs's HMAC verification is vulnerable to timing attack

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version 0.0.19 fixes the issue.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:10:11.349Z. Updated 2025-09-12T13:45:48.203Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:45 WIB

Official record

MedPublished 12 Sep 2025, 20:03 WIB

CVE-2025-59139

Hono has Body Limit Middleware Bypass

Hono is a Web application framework that provides support for any JavaScript runtime. In versions prior to 4.9.7, a flaw in the `bodyLimit` middleware could allow bypassing the configured request body size limit when conflicting HTTP headers were present. The middleware previously prioritized the `Content-Length` heade…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:03:05.777Z. Updated 2025-09-12T13:45:58.215Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:45 WIB

Official record

HighPublished 12 Sep 2025, 20:01 WIB

CVE-2025-59054

dstack has insecure LUKS2 persistent storage partitions that may be opened and used

dstack is a software development kit (SDK) to simplify the deployment of arbitrary containerized apps into trusted execution environments. In versions of dstack prior to 0.5.4, a malicious host may provide a crafted LUKS2 data volume to a dstack CVM for use as the `/data` mount. The guest will open the volume and write…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T13:01:02.816Z. Updated 2025-11-28T14:46:59.604Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated28 Nov 2025, 21:46 WIB

Official record

MedPublished 12 Sep 2025, 19:32 WIB

CVE-2025-10318

JeecgBoot WebSocket Message sendWebSocketMsg improper authorization

A vulnerability was identified in JeecgBoot up to 3.8.2. Affected by this vulnerability is an unknown functionality of the file /api/system/sendWebSocketMsg of the component WebSocket Message Handler. The manipulation of the argument userIds leads to improper authorization. The attack can be initiated remotely. The exp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T12:32:08.175Z. Updated 2025-09-12T17:21:13.826Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated13 Sep 2025, 00:21 WIB

Official record

UnscoredPublished 12 Sep 2025, 18:19 WIB

CVE-2025-8699

CVE-2025-8699

Some "Stored Value" Unattended Payment Solutions of KioSoft use vulnerable NFC cards. Attackers could potentially use this vulnerability to change the balance on the cards and generate money. The account balance is stored on an insecure MiFare Classic NFC card and can be read and written back. By carefully observing ch…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T11:19:44.345Z. Updated 2025-11-03T18:14:08.379Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 01:14 WIB

Official record

MedPublished 12 Sep 2025, 17:46 WIB

CVE-2025-6638

Regular Expression Denial of Service (ReDoS) in huggingface/transformers

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's `remove_language_code()` method. This vulnerability is present in version 4.52.4 and has been fixed in version 4.53.0. The issue arises from inefficient rege…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T10:46:07.934Z. Updated 2025-09-12T11:52:53.854Z.

CVSS5.3v3.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 18:52 WIB

Official record

HighPublished 12 Sep 2025, 17:33 WIB

CVE-2025-27240

Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T10:33:46.484Z. Updated 2026-02-26T17:48:38.935Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:48 WIB

Official record

LowPublished 12 Sep 2025, 17:33 WIB

CVE-2025-27238

API hostprototype.get lists data to users with insufficient authorization.

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them.

Excerpt language: en.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T10:33:17.753Z. Updated 2025-09-15T18:48:19.882Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated16 Sep 2025, 01:48 WIB

Official record

MedPublished 12 Sep 2025, 17:32 WIB

CVE-2025-27233

Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T10:32:36.174Z. Updated 2025-09-12T11:58:28.618Z.

CVSS5.7v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 18:58 WIB

Official record

HighPublished 12 Sep 2025, 17:31 WIB

CVE-2025-27234

Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-12T10:31:58.770Z. Updated 2026-02-26T17:48:39.389Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:48 WIB

Official record