Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,054 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2576.3%
High1,14328%
Med1,56539%
Low1323.3%
None10.02%
Legacy00.00%
Unscored95624%

Matching records by UTC month

Nov 244,054

Signal coverage

KEV-listed: 16
With a forecast: 4,054
Unknown date: 0
Unscored severity: 956

Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.

Showing 2681–2700 of 4,054By severity band: Critical · 9.0–10.0 257, High · 7.0–8.9 1,143, Medium · 4.0–6.9 1,565, Low · 0.1–3.9 132, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 956

MedPublished 12 Nov 2024, 20:00 WIB

CVE-2024-11123

上海灵当信息科技有限公司 Lingdang CRM pdf.php path traversal

A vulnerability, which was classified as problematic, was found in 上海灵当信息科技有限公司 Lingdang CRM up to 8.6.4.3. This affects an unknown part of the file /crm/data/pdf.php. The manipulation of the argument url with the input ../config.inc.php leads to path traversal. It is possible to initiate the attack remotely. The explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T13:00:13.781Z. Updated 2024-11-12T15:52:04.520Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 22:52 WIB

Official record

HighPublished 12 Nov 2024, 19:50 WIB

CVE-2024-50572

CVE-2024-50572

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2681 to 2700 of 4054.First page Next page

Published 2024-11-12T12:50:08.911Z. Updated 2025-02-11T10:28:50.351Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated11 Feb 2025, 17:28 WIB

Official record

MedPublished 12 Nov 2024, 19:50 WIB

CVE-2024-50561

CVE-2024-50561

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:50:06.660Z. Updated 2025-02-11T10:28:48.558Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Feb 2025, 17:28 WIB

Official record

LowPublished 12 Nov 2024, 19:50 WIB

CVE-2024-50560

CVE-2024-50560

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:50:04.034Z. Updated 2025-02-11T10:28:46.678Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated11 Feb 2025, 17:28 WIB

Official record

MedPublished 12 Nov 2024, 19:50 WIB

CVE-2024-50559

CVE-2024-50559

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:50:01.376Z. Updated 2024-11-12T14:50:27.518Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:50 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-50558

CVE-2024-50558

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:58.734Z. Updated 2024-11-12T14:50:58.351Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:50 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-50557

CVE-2024-50557

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.2), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All versions < V8.2), SCAL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:56.426Z. Updated 2024-11-20T16:47:43.578Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated20 Nov 2024, 23:47 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-50313

CVE-2024-50313

A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.6 (All versions < V10.6.15 …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:54.803Z. Updated 2025-08-27T21:33:05.238Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Aug 2025, 04:33 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-50310

CVE-2024-50310

A vulnerability has been identified in SIMATIC CP 1543-1 V4.0 (6GK7543-1AX10-0XE0) (All versions >= V4.0.44 < V4.0.50). Affected devices do not properly handle authorization. This could allow an unauthenticated remote attacker to gain access to the filesystem.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:53.487Z. Updated 2024-11-12T16:08:37.035Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:08 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-47942

CVE-2024-47942

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:52.230Z. Updated 2024-11-12T16:10:47.014Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:10 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-47941

CVE-2024-47941

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:50.990Z. Updated 2024-11-12T16:12:38.815Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:12 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-47940

CVE-2024-47940

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the current process.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:49.740Z. Updated 2024-11-12T16:14:49.716Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:14 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-47808

CVE-2024-47808

A vulnerability has been identified in SINEC NMS (All versions < V3.0 SP1). The affected application contains a database function, that does not properly restrict the permissions of users to write to the filesystem of the host system. This could allow an authenticated medium-privileged attacker to write arbitrary cont…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:48.462Z. Updated 2024-11-12T16:25:18.148Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:25 WIB

Official record

HighPublished 12 Nov 2024, 19:49 WIB

CVE-2024-47783

CVE-2024-47783

A vulnerability has been identified in SIPORT (All versions < V3.4.0). The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain elevated privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:47.188Z. Updated 2024-11-12T16:27:21.975Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 23:27 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46894

CVE-2024-46894

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate authorization of a user to query the "/api/sftp/users" endpoint. This could allow an authenticated remote attacker to gain knowledge about the list of configured users of the SFTP ser…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:45.831Z. Updated 2024-11-12T14:19:46.429Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:19 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46892

CVE-2024-46892

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly invalidate sessions when the associated user is deleted or disabled or their permissions are modified. This could allow an authenticated attacker to continue performing malicious actions even …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:44.470Z. Updated 2024-11-12T14:21:32.457Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:21 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46891

CVE-2024-46891

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly restrict the size of generated log files. This could allow an unauthenticated remote attacker to trigger a large amount of logged events to exhaust the system's resources and create a denial o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:43.155Z. Updated 2024-11-12T14:25:48.481Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:25 WIB

Official record

CritPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46890

CVE-2024-46890

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly validate input sent to specific endpoints of its web API. This could allow an authenticated remote attacker with high privileges on the application to execute arbitrary code on the underlying …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:41.829Z. Updated 2024-11-12T14:28:21.227Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:28 WIB

Official record

MedPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46889

CVE-2024-46889

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application uses hard-coded cryptographic key material to obfuscate configuration files. This could allow an attacker to learn that cryptographic key material through reverse engineering of the application binary and decry…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:40.474Z. Updated 2024-11-12T14:30:25.375Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:30 WIB

Official record

CritPublished 12 Nov 2024, 19:49 WIB

CVE-2024-46888

CVE-2024-46888

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 3). The affected application does not properly sanitize user provided paths for SFTP-based file up- and downloads. This could allow an authenticated remote attacker to manipulate arbitrary files on the filesystem and achieve arbitrary code…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-12T12:49:39.127Z. Updated 2024-11-12T14:32:11.296Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated12 Nov 2024, 21:32 WIB

Official record