Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 14,934 published records · 32 KEV · 14,934 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

14,934 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2258.2%
High5,37436%
Med4,26529%
Low4232.8%
None20.01%
Legacy00.00%
Unscored3,64524%

Matching records by UTC month

Sep 2614,934

Signal coverage

KEV-listed: 32
With a forecast: 14,934
Unknown date: 0
Unscored severity: 3,645

Share of cohort: KEV 0.21% · forecast 100% · unscored 24%.

Showing 261–280 of 14,934By severity band: Critical · 9.0–10.0 1,225, High · 7.0–8.9 5,374, Medium · 4.0–6.9 4,265, Low · 0.1–3.9 423, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 3,645

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47502

CVE-2026-47502

NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to memory corruption. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:30.530Z. Updated 2026-10-01T03:56:06.095Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:56 WIB

Official record

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47501

CVE-2026-47501

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffers during event buffer setup. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 261 to 280 of 14934.First page Next page

Published 2026-09-30T15:49:29.129Z. Updated 2026-10-01T03:56:04.596Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:56 WIB

Official record

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47500

CVE-2026-47500

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead to a use-after-free condition. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:27.911Z. Updated 2026-10-01T03:56:02.192Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:56 WIB

Official record

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47494

CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:26.723Z. Updated 2026-10-01T03:56:00.875Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:56 WIB

Official record

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47491

CVE-2026-47491

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code execution, denial of service,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:25.551Z. Updated 2026-10-01T03:56:00.026Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:56 WIB

Official record

HighPublished 30 Sep 2026, 22:49 WIB

CVE-2026-47489

CVE-2026-47489

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:24.366Z. Updated 2026-09-30T17:59:54.559Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:59 WIB

Official record

MedPublished 30 Sep 2026, 22:49 WIB

CVE-2026-55174

UltrafastSecp256k1: ECDSA adaptor verification accepts non-adaptable pre-signatures due to missing DLEQ binding

UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with reproducible audit evidence, compatibility shims, and profile-based review scopes. Prior to version 4.2.0, UltrafastSecp256k1's ECDSA adaptor pre-signature verification accepts forged adaptor pre-signatures whose "r" value is not cryptographi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:49:10.453Z. Updated 2026-09-30T19:52:01.569Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:52 WIB

Official record

LowPublished 30 Sep 2026, 22:38 WIB

CVE-2026-103436

CVE-2026-103436

apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-field path, when the matched STATUS line has fewer than three whitespace-separated tokens, sscanf("%*s %*s %s", answer) performs no assignment but the f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:38:48.231Z. Updated 2026-10-02T16:20:26.467Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated02 Oct 2026, 23:20 WIB

Official record

HighPublished 30 Sep 2026, 22:31 WIB

CVE-2026-103432

CVE-2026-103432

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:31:08.092Z. Updated 2026-09-30T19:35:31.145Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:35 WIB

Official record

MedPublished 30 Sep 2026, 22:30 WIB

CVE-2026-103230

AdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the file User/ord.php of the component Order Placement. Executing a manipulation of the argument id/name can lead to sql injection. The attack can be lau…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:30:09.948Z. Updated 2026-09-30T19:36:35.127Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Oct 2026, 02:36 WIB

Official record

UnscoredPublished 30 Sep 2026, 22:20 WIB

CVE-2026-80490

Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified

Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, first_match and match_details methods use the T_STD_STRING typemap to translate Perl scalars (SVs) into strings via the std::string constructor, using the SvPV macro to stringify the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:20:45.601Z. Updated 2026-09-30T17:07:30.931Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2026, 00:07 WIB

Official record

LowPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100280

CVE-2026-100280

In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:56.013Z. Updated 2026-09-30T15:48:37.251Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100279

CVE-2026-100279

In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:55.710Z. Updated 2026-09-30T15:48:37.393Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100278

CVE-2026-100278

In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments

Excerpt language: en.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:55.378Z. Updated 2026-09-30T15:48:37.523Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

HighPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100277

CVE-2026-100277

In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

Excerpt language: en.

Severity high: primary CNA CVSS 8.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:55.036Z. Updated 2026-10-01T03:55:41.614Z.

CVSS8.9v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100276

CVE-2026-100276

In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:54.642Z. Updated 2026-09-30T15:48:37.786Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100275

CVE-2026-100275

In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:54.299Z. Updated 2026-09-30T15:48:37.925Z.

CVSS6.9v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100274

CVE-2026-100274

In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:53.995Z. Updated 2026-09-30T15:48:38.071Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record

HighPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100273

CVE-2026-100273

In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:53.525Z. Updated 2026-10-01T03:55:43.315Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated01 Oct 2026, 10:55 WIB

Official record

MedPublished 30 Sep 2026, 22:17 WIB

CVE-2026-100272

CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues

Excerpt language: en.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-09-30T15:17:52.969Z. Updated 2026-09-30T15:48:38.362Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated30 Sep 2026, 22:48 WIB

Official record