Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 2561–2580 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

MedPublished 06 Nov 2025, 06:30 WIB

CVE-2025-64114

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - #151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom Fields plugin to be inst…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T23:30:59.120Z. Updated 2025-11-24T20:28:08.246Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 03:28 WIB

Official record

HighPublished 06 Nov 2025, 06:14 WIB

CVE-2025-62596

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2561 to 2580 of 3020.First page Next page

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T23:14:37.167Z. Updated 2025-11-06T16:54:15.942Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated06 Nov 2025, 23:54 WIB

Official record

HighPublished 06 Nov 2025, 06:09 WIB

CVE-2025-62161

youki container escape via "masked path" abuse due to mount race conditions

Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T23:09:09.014Z. Updated 2025-11-06T21:20:19.865Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 04:20 WIB

Official record

HighPublished 06 Nov 2025, 05:44 WIB

CVE-2025-55278

HCL DevOps Loop is susceptible to an improper authentication vulnerability

Improper authentication in the API authentication middleware of HCL DevOps Loop allows authentication tokens to be accepted without proper validation of their expiration and cryptographic signature. As a result, an attacker could potentially use expired or tampered tokens to gain unauthorized access to sensitive resou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T22:44:17.256Z. Updated 2025-11-06T21:20:55.355Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated07 Nov 2025, 04:20 WIB

Official record

HighPublished 06 Nov 2025, 04:20 WIB

CVE-2025-12779

CVE-2025-12779

Improper handling of the authentication token in the Amazon WorkSpaces client for Linux, versions 2023.0 through 2024.8, may expose the authentication token for DCV-based WorkSpaces to other local users on the same client machine. Under certain circumstances, a local user may be able to extract another local user's aut…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T21:20:51.567Z. Updated 2026-02-26T17:47:11.512Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

MedPublished 06 Nov 2025, 02:21 WIB

CVE-2025-10853

Reflected Cross-Site Scripting (XSS) in Management Console of Multiple WSO2 Products Due to Improper Output Encoding

A reflected cross-site scripting (XSS) vulnerability exists in the management console of multiple WSO2 products due to improper output encoding. By tampering with specific parameters, a malicious actor can inject arbitrary JavaScript into the response, leading to reflected XSS. Successful exploitation could result in …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T19:21:32.971Z. Updated 2025-11-05T19:58:21.875Z.

CVSS5.2v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 02:58 WIB

Official record

MedPublished 06 Nov 2025, 02:02 WIB

CVE-2025-5770

Reflected Cross-Site Scripting (XSS) in Authentication Endpoints of Multiple WSO2 Products

A reflected cross-site scripting (XSS) vulnerability exists in the authentication endpoints of multiple WSO2 products due to a lack of output encoding. A malicious actor can inject arbitrary JavaScript payloads into the authentication endpoint, which are reflected back in the response, enabling browser-based attacks. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T19:02:48.434Z. Updated 2025-11-05T20:13:05.330Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 03:13 WIB

Official record

UnscoredPublished 06 Nov 2025, 01:33 WIB

CVE-2025-43418

CVE-2025-43418

This issue was addressed by restricting options offered on a locked device. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An attacker with physical access to a locked device may be able to view sensitive user information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T18:33:35.485Z. Updated 2026-04-02T18:15:26.401Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:15 WIB

Official record

UnscoredKEVPublished 06 Nov 2025, 01:33 WIB

CVE-2023-43000

CVE-2023-43000

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.5, iOS 16.6 and iPadOS 16.6, Safari 16.6, iOS 15.8.7 and iPadOS 15.8.7. Processing maliciously crafted web content may lead to memory corruption.

Excerpt language: en.

Unscored under this view's policy KEV listed. Forecast present in this snapshot.

Published 2025-11-05T18:33:23.777Z. Updated 2026-09-21T19:03:00.605Z.

CVSS—KEVListedEPSSPresentUpdated22 Sep 2026, 02:03 WIB

Official record

MedPublished 06 Nov 2025, 01:32 WIB

CVE-2025-12745

QuickJS quickjs.c js_array_buffer_slice buffer over-read

A weakness has been identified in QuickJS up to eb2c89087def1829ed99630cb14b549d7a98408c. This affects the function js_array_buffer_slice of the file quickjs.c. This manipulation causes buffer over-read. The attack is restricted to local execution. The exploit has been made available to the public and could be exploite…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T18:32:07.580Z. Updated 2025-11-05T19:26:04.149Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated06 Nov 2025, 02:26 WIB

Official record

HighPublished 06 Nov 2025, 01:31 WIB

CVE-2025-11093

Arbitrary Code Execution with higher privileged users in Multiple WSO2 Products via Script Mediator Engines (GraalJS and NashornJS)

An arbitrary code execution vulnerability exists in multiple WSO2 products due to insufficient restrictions in the GraalJS and NashornJS Script Mediator engines. Authenticated users with elevated privileges can execute arbitrary code within the integration runtime environment. By default, access to these scripting eng…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T18:31:17.873Z. Updated 2025-11-05T19:39:15.696Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 02:39 WIB

Official record

MedPublished 06 Nov 2025, 01:23 WIB

CVE-2025-31954

HCL iAutomate is susceptible to a sensitive information disclosure

HCL iAutomate v6.5.1 and v6.5.2 is susceptible to a sensitive information disclosure. An HTTP GET method is used to process a request and includes sensitive information in the query string of that request. An attacker could potentially access information or resources they were not intended to see.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T18:23:21.019Z. Updated 2025-11-05T18:46:53.781Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 01:46 WIB

Official record

HighPublished 06 Nov 2025, 01:03 WIB

CVE-2025-10907

Authenticated Arbitrary File Upload in Multiple WSO2 Products via SOAP Admin Services Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to insufficient validation of uploaded content and destination in SOAP admin services. A malicious actor with administrative privileges can upload a specially crafted file to a user-controlled location within the deployment. Successful exploit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T18:03:49.831Z. Updated 2025-11-05T18:49:44.604Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 01:49 WIB

Official record

MedPublished 06 Nov 2025, 00:18 WIB

CVE-2025-10713

XML External Entity (XXE) Vulnerability in Multiple WSO2 Products Due to Improper XML Parser Configuration

An XML External Entity (XXE) vulnerability exists in multiple WSO2 products due to improper configuration of the XML parser. The application parses user-supplied XML without applying sufficient restrictions, allowing resolution of external entities. A successful attack could enable a remote, unauthenticated attacker t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T17:18:24.719Z. Updated 2025-11-05T18:15:56.913Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated06 Nov 2025, 01:15 WIB

Official record

HighPublished 06 Nov 2025, 00:01 WIB

CVE-2025-43990

CVE-2025-43990

Dell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T17:01:23.986Z. Updated 2026-02-26T17:47:12.177Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

MedPublished 05 Nov 2025, 23:50 WIB

CVE-2025-46366

CVE-2025-46366

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T16:50:28.754Z. Updated 2026-02-26T17:47:12.528Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

MedPublished 05 Nov 2025, 23:46 WIB

CVE-2025-46424

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T16:46:25.707Z. Updated 2026-02-26T17:47:12.841Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

MedPublished 05 Nov 2025, 23:40 WIB

CVE-2025-46365

CVE-2025-46365

Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T16:40:39.934Z. Updated 2026-02-26T17:47:13.147Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

CritPublished 05 Nov 2025, 23:36 WIB

CVE-2025-46364

CVE-2025-46364

Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T16:36:00.347Z. Updated 2026-02-26T17:47:13.534Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

MedPublished 05 Nov 2025, 23:33 WIB

CVE-2025-20304

CVE-2025-20304

Multiple vulnerabilities in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a reflected XSS attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-05T16:33:27.573Z. Updated 2025-12-04T20:41:09.536Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated05 Dec 2025, 03:41 WIB

Official record