Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2701–2720 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39739

iommu/arm-smmu-qcom: Add SM6115 MDSS compatible

In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS compatible to clients compatible list, as it also needs that workaround. Without this workaround, for example, QRB4210 RB2 which is based on SM4250/SM6115 generates a lot of smmu unh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:13.954Z. Updated 2026-05-11T21:35:20.312Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

HighPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39738

btrfs: do not allow relocation of partially dropped subvolumes

In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal report that balance triggered transaction abort, with the following call trace: item 85 key (594509824 169 0) itemoff 12599 itemsize 33 extent refs…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2701 to 2720 of 4319.First page Next page

Published 2025-09-11T16:52:13.228Z. Updated 2026-10-15T22:02:31.372Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 05:02 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39737

mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() A soft lockup warning was observed on a relative small system x86-64 system with 16 GB of memory when running a debug kernel with kmemleak enabled. watchdog: BUG: soft lockup - CPU#8 stuck …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:12.519Z. Updated 2026-05-12T12:06:39.656Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 19:06 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39736

mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock

In the Linux kernel, the following vulnerability has been resolved: mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock When netpoll is enabled, calling pr_warn_once() while holding kmemleak_lock in mem_pool_alloc() can cause a deadlock due to lock inversion with the netconsole subsystem. This occu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:11.772Z. Updated 2026-05-12T12:06:38.396Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 19:06 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:49 WIB

CVE-2025-40300

x86/vmscape: Add conditional IBPB mitigation

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious gue…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:49:24.809Z. Updated 2026-10-15T01:09:08.416Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:09 WIB

Official record

MedPublished 11 Sep 2025, 23:46 WIB

CVE-2025-26499

CVE-2025-26499

Under heavy system utilization a random race condition can occur during authentication or token refresh operation. This flaw allows one user to be granted a token intended for another user, resulting in impersonation until the session is ended. This flaw cannot be intentionally exploited due to the required concurring …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:46:28.575Z. Updated 2025-09-11T20:37:54.876Z.

CVSS6v3.1KEVNot listedEPSSPresentUpdated12 Sep 2025, 03:37 WIB

Official record

MedPublished 11 Sep 2025, 23:02 WIB

CVE-2025-10255

Ascensio System SIA OnlyOffice Comment Messages.aspx cross site scripting

A vulnerability was determined in Ascensio System SIA OnlyOffice up to 12.7.0. Impacted is an unknown function of the file /Products/Projects/Messages.aspx of the component Comment Handler. Executing manipulation can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:02:05.500Z. Updated 2025-09-11T17:31:12.718Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 00:31 WIB

Official record

MedPublished 11 Sep 2025, 22:32 WIB

CVE-2025-10254

Ascensio System SIA OnlyOffice SVG Image Messages.aspx cross site scripting

A vulnerability was found in Ascensio System SIA OnlyOffice up to 12.7.0. This issue affects some unknown processing of the file /Products/Projects/Messages.aspx of the component SVG Image Handler. Performing manipulation results in cross site scripting. The attack may be initiated remotely. The exploit has been made p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T15:32:05.251Z. Updated 2025-09-11T16:23:19.388Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 23:23 WIB

Official record

UnscoredPublished 11 Sep 2025, 21:05 WIB

CVE-2025-58145

Arm issues with page refcounting

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:36.380Z. Updated 2025-11-04T21:13:27.555Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:13 WIB

Official record

UnscoredPublished 11 Sep 2025, 21:05 WIB

CVE-2025-58144

Arm issues with page refcounting

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:36.284Z. Updated 2025-11-04T21:13:26.232Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:13 WIB

Official record

HighPublished 11 Sep 2025, 21:05 WIB

CVE-2025-10193

Neo4j Cypher MCP server is vulnerable to DNS rebinding attacks

DNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend sufficient time there for DN…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:30.592Z. Updated 2026-02-26T17:48:41.293Z.

CVSS7.4v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:48 WIB

Official record

UnscoredPublished 11 Sep 2025, 21:05 WIB

CVE-2025-58143

Mutiple vulnerabilities in the Viridian interface

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:29.729Z. Updated 2025-11-04T21:13:24.914Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:13 WIB

Official record

UnscoredPublished 11 Sep 2025, 21:05 WIB

CVE-2025-58142

Mutiple vulnerabilities in the Viridian interface

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:29.649Z. Updated 2025-11-04T21:13:23.610Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:13 WIB

Official record

UnscoredPublished 11 Sep 2025, 21:05 WIB

CVE-2025-27466

Mutiple vulnerabilities in the Viridian interface

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:05:29.525Z. Updated 2025-11-04T21:09:51.419Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Nov 2025, 04:09 WIB

Official record

MedPublished 11 Sep 2025, 21:02 WIB

CVE-2025-10253

openDCIM SVG File uploadifive.php cross site scripting

A vulnerability has been found in openDCIM 23.04. This vulnerability affects unknown code of the file /scripts/uploadifive.php of the component SVG File Handler. Such manipulation of the argument Filedata leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T14:02:06.360Z. Updated 2025-09-11T14:27:15.248Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 21:27 WIB

Official record

MedPublished 11 Sep 2025, 20:42 WIB

CVE-2025-8716

Cache exploitation vulnerability

In Content Management versions 20.4- 25.3 authenticated attackers may exploit a complex cache poisoning technique to download unprotected files from the server if the filenames are known.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T13:42:01.686Z. Updated 2025-09-11T14:16:18.491Z.

CVSS5.8v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 21:16 WIB

Official record

LowPublished 11 Sep 2025, 20:32 WIB

CVE-2025-10252

SEAT Queue Ticket Kiosk Java RMI Registry deserialization

A flaw has been found in SEAT Queue Ticket Kiosk up to 20250827. This affects an unknown part of the component Java RMI Registry Handler. This manipulation causes deserialization. The attack can only be done within the local network. The attack is considered to have high complexity. It is indicated that the exploitabil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T13:32:04.989Z. Updated 2025-09-11T13:51:59.150Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 20:51 WIB

Official record

MedPublished 11 Sep 2025, 20:02 WIB

CVE-2025-10251

FoxCMS Images.php batchCope sql injection

A vulnerability was detected in FoxCMS up to 1.24. Affected by this issue is the function batchCope of the file /app/admin/controller/Images.php. The manipulation of the argument ids results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contact…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T13:02:06.501Z. Updated 2025-09-11T13:33:52.704Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 20:33 WIB

Official record

MedPublished 11 Sep 2025, 18:49 WIB

CVE-2025-40696

Cross Site Scripting in PHPGurukul Online Fire Reporting System

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fullname', 'location' and 'message' parameters via POST at the endpoint '/ofrs/reporting.php'. This vulnerability could allow a remote user to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T11:49:52.609Z. Updated 2025-09-11T14:34:53.133Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 21:34 WIB

Official record

MedPublished 11 Sep 2025, 18:46 WIB

CVE-2025-40695

Cross Site Scripting in PHPGurukul Online Fire Reporting System

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This vulnerability could allow a rem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T11:46:39.872Z. Updated 2025-09-11T14:34:58.730Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 21:34 WIB

Official record