Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,629 published records · 12 KEV · 3,629 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,629 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3078.5%
High1,02528%
Med1,54142%
Low1123.1%
None10.03%
Legacy00.00%
Unscored64318%

Matching records by UTC month

Aug 253,629

Signal coverage

KEV-listed: 12
With a forecast: 3,629
Unknown date: 0
Unscored severity: 643

Share of cohort: KEV 0.33% · forecast 100% · unscored 18%.

Showing 261–280 of 3,629By severity band: Critical · 9.0–10.0 307, High · 7.0–8.9 1,025, Medium · 4.0–6.9 1,541, Low · 0.1–3.9 112, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 643

LowPublished 29 Aug 2025, 04:32 WIB

CVE-2025-9589

Cudy WR1200EA shadow default password

A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is associated with this attack. The exploitability is told to be di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T21:32:07.077Z. Updated 2025-08-29T17:06:04.813Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated30 Aug 2025, 00:06 WIB

Official record

MedPublished 29 Aug 2025, 04:02 WIB

CVE-2025-9586

Comfast CF-N1 webmgnt wireless_device_dissoc command injection

A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 261 to 280 of 3629.First page Next page

Published 2025-08-28T21:02:05.469Z. Updated 2025-08-29T13:29:07.586Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 20:29 WIB

Official record

MedPublished 29 Aug 2025, 03:32 WIB

CVE-2025-9585

Comfast CF-N1 webmgnt wifilith_delete_pic_file command injection

A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T20:32:06.368Z. Updated 2025-08-29T13:27:44.109Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 20:27 WIB

Official record

MedPublished 29 Aug 2025, 03:02 WIB

CVE-2025-9584

Comfast CF-N1 webmgnt update_interface_png command injection

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T20:02:08.649Z. Updated 2025-08-28T20:13:50.031Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 03:13 WIB

Official record

MedPublished 29 Aug 2025, 03:02 WIB

CVE-2025-9583

Comfast CF-N1 webmgnt ping_config command injection

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T20:02:06.456Z. Updated 2025-08-28T20:14:55.933Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 03:14 WIB

Official record

HighPublished 29 Aug 2025, 02:36 WIB

CVE-2025-6203

Vault unauthenticated denial of service through complex json payload

A malicious user may submit a specially-crafted complex payload that otherwise meets the default request size limit which results in excessive memory and CPU consumption of Vault. This may lead to a timeout in Vault’s auditing subroutine, potentially resulting in the Vault server to become unresponsive. This vulnerabil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T19:36:09.870Z. Updated 2025-10-23T18:18:34.361Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated24 Oct 2025, 01:18 WIB

Official record

MedPublished 29 Aug 2025, 02:32 WIB

CVE-2025-9582

Comfast CF-N1 webmgnt ntp_timezone command injection

A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T19:32:07.054Z. Updated 2025-08-28T20:04:06.709Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 03:04 WIB

Official record

MedPublished 29 Aug 2025, 02:02 WIB

CVE-2025-9581

Comfast CF-N1 webmgnt multi_pppoe command injection

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T19:02:10.432Z. Updated 2025-08-28T20:01:08.768Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 03:01 WIB

Official record

MedPublished 29 Aug 2025, 02:02 WIB

CVE-2025-9580

LB-LINK BL-X26 HTTP set_blacklist os command injection

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T19:02:06.830Z. Updated 2025-08-28T19:58:24.267Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 02:58 WIB

Official record

MedPublished 29 Aug 2025, 01:32 WIB

CVE-2025-9579

LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection

A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:32:09.759Z. Updated 2025-08-28T18:41:59.318Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:41 WIB

Official record

LowPublished 29 Aug 2025, 01:32 WIB

CVE-2025-9577

TOTOLINK X2000R Administrative shadow.sample default credentials

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:32:07.573Z. Updated 2025-08-28T18:41:04.929Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:41 WIB

Official record

MedPublished 29 Aug 2025, 01:04 WIB

CVE-2025-31971

AIML Solutions for HCL SX is susceptible to a URL validation vulnerability

AIML Solutions for HCL SX is vulnerable to a URL validation vulnerability. The issue may allow attackers to launch a server-side request forgery (SSRF) attack enabling unauthorized network calls from the system, potentially exposing internal services or sensitive information.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:04:17.132Z. Updated 2025-08-28T18:21:13.424Z.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:21 WIB

Official record

LowPublished 29 Aug 2025, 01:02 WIB

CVE-2025-9576

seeedstudio ReSpeaker Administrative shadow default credentials

A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally. A high degree of complexity is needed for the attack. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:02:08.263Z. Updated 2025-08-28T18:23:48.501Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:23 WIB

Official record

MedPublished 29 Aug 2025, 01:02 WIB

CVE-2025-9575

Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injection

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command injection. The attack may b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:02:06.116Z. Updated 2025-08-28T18:31:06.309Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:31 WIB

Official record

MedPublished 29 Aug 2025, 01:01 WIB

CVE-2025-9195

CVE-2025-9195

Improper input validation in firmware of some Solidigm DC Products may allow an attacker with local access to cause a Denial of Service

Excerpt language: en.

Severity medium: primary CNA CVSS 4.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T18:01:40.123Z. Updated 2025-08-28T18:32:17.579Z.

CVSS4.4v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:32 WIB

Official record

CritPublished 29 Aug 2025, 00:50 WIB

CVE-2025-58059

Valtimo scripting engine can be used to gain access to sensitive data or resources

Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T17:50:50.585Z. Updated 2025-08-28T18:15:17.669Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:15 WIB

Official record

MedPublished 29 Aug 2025, 00:43 WIB

CVE-2025-58049

XWiki PDF export jobs store sensitive cookies unencrypted in job statuses

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions from 14.4.2 to before 16.4.8, 16.5.0-rc-1 to before 16.10.7, and 17.0.0-rc-1 to before 17.4.0-rc-1, the PDF export jobs store sensitive cookies unencrypted in job statuses. XWiki shouldn't store password…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T17:43:39.779Z. Updated 2025-08-28T18:15:47.326Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:15 WIB

Official record

CritPublished 29 Aug 2025, 00:31 WIB

CVE-2025-58048

Paymenter Vulnerable to Remote Code Execution via Public File Uploads

Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read from configuration files…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T17:31:19.732Z. Updated 2025-08-28T18:16:36.144Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 01:16 WIB

Official record

HighPublished 29 Aug 2025, 00:10 WIB

CVE-2025-58047

Volto affected by possible DoS by invoking specific URL by anonymous user

Volto is a React based frontend for the Plone Content Management System. In versions from 19.0.0-alpha.1 to before 19.0.0-alpha.4, 18.0.0 to before 18.24.0, 17.0.0 to before 17.22.1, and prior to 16.34.0, an anonymous user could cause the NodeJS server part of Volto to quit with an error when visiting a specific URL. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T17:10:58.381Z. Updated 2025-11-04T21:13:20.996Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:13 WIB

Official record

MedPublished 29 Aug 2025, 00:06 WIB

CVE-2025-31979

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix Service Management (SM)

A File Upload Validation Bypass vulnerability has been identified in the HCL BigFix SM, where the application fails to properly enforce file type restrictions during the upload process. An attacker may exploit this flaw to upload malicious or unauthorized files, such as scripts, executables, or web shells, by bypassing…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-28T17:06:31.151Z. Updated 2025-08-28T17:14:09.146Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated29 Aug 2025, 00:14 WIB

Official record