Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,273 published records · 17 KEV · 4,273 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,273 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2375.5%
High1,05525%
Med1,75941%
Low751.8%
None20.05%
Legacy00.00%
Unscored1,14527%

Matching records by UTC month

Jan 254,273

Signal coverage

KEV-listed: 17
With a forecast: 4,273
Unknown date: 0
Unscored severity: 1,145

Share of cohort: KEV 0.40% · forecast 100% · unscored 27%.

Showing 2881–2900 of 4,273By severity band: Critical · 9.0–10.0 237, High · 7.0–8.9 1,055, Medium · 4.0–6.9 1,759, Low · 0.1–3.9 75, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 1,145

MedPublished 12 Jan 2025, 21:00 WIB

CVE-2025-0398

longpi1 warehouse Backend updateInport cross site scripting

A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The attack can be launched rem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-12T14:00:14.562Z. Updated 2025-01-13T15:15:14.434Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:15 WIB

Official record

MedPublished 12 Jan 2025, 20:26 WIB

CVE-2024-51456

IBM Robotic Process Automation information disclosure

IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2881 to 2900 of 4273.First page Next page

Published 2025-01-12T13:26:34.770Z. Updated 2025-01-13T15:15:57.927Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:15 WIB

Official record

MedPublished 12 Jan 2025, 19:31 WIB

CVE-2025-0397

reckcn SPPanAdmin edit cross site scripting

A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-12T12:31:04.239Z. Updated 2025-01-13T15:16:51.177Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:16 WIB

Official record

HighPublished 12 Jan 2025, 19:00 WIB

CVE-2025-0396

exelban stats XPC Service shouldAcceptNewConnection command injection

A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the attack on the local host. Upgrading to version 2.11.22 is ab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-12T12:00:15.952Z. Updated 2025-01-13T15:18:12.233Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:18 WIB

Official record

MedPublished 12 Jan 2025, 08:30 WIB

CVE-2021-29669

IBM Jazz Foundation cross-site scripting

IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-12T01:30:05.836Z. Updated 2025-01-13T15:18:46.605Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:18 WIB

Official record

MedPublished 12 Jan 2025, 08:10 WIB

CVE-2024-49785

IBM watsonx.ai cross-site scripting

IBM watsonx.ai 1.1 through 2.0.3 and IBM watsonx.ai on Cloud Pak for Data 4.8 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure withi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-12T01:10:43.851Z. Updated 2025-01-13T15:16:25.499Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated13 Jan 2025, 22:16 WIB

Official record

UnscoredPublished 11 Jan 2025, 22:10 WIB

CVE-2024-57881

mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy()

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in split_large_buddy() In split_large_buddy(), we might call pfn_to_page() on a PFN that might not exist. In corner cases, such as when freeing the highest pageblock in the last me…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T15:10:43.786Z. Updated 2026-05-11T20:59:42.163Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 22:05 WIB

CVE-2024-57880

ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array The code uses the initialised member of the asoc_sdw_dailink struct to determine if a member of the array is in use. However in the case the array is completely full this will lead to a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T15:05:28.763Z. Updated 2026-05-11T20:59:40.925Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 22:05 WIB

CVE-2024-57879

Bluetooth: iso: Always release hdev at the end of iso_listen_bis

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: iso: Always release hdev at the end of iso_listen_bis Since hci_get_route holds the device before returning, the hdev should be released with hci_dev_put at the end of iso_listen_bis even if the function returns with an error.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T15:05:22.760Z. Updated 2026-05-23T15:56:14.731Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:56 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:49 WIB

CVE-2024-57878

arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR Currently fpmr_set() doesn't initialize the temporary 'fpmr' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will be written back…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:49:04.088Z. Updated 2026-05-11T20:59:38.591Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:49 WIB

CVE-2024-57877

arm64: ptrace: fix partial SETREGSET for NT_ARM_POE

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_POE Currently poe_set() doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently an arbitrary value will be written back t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:49:03.297Z. Updated 2026-05-11T20:59:37.368Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:49 WIB

CVE-2024-57876

drm/dp_mst: Fix resetting msg rx state after topology removal

In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Fix resetting msg rx state after topology removal If the MST topology is removed during the reception of an MST down reply or MST up request sideband message, the drm_dp_mst_topology_mgr::up_req_recv/down_rep_recv states could be reset fr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:49:02.550Z. Updated 2026-05-23T15:56:11.973Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:56 WIB

Official record

HighPublished 11 Jan 2025, 21:49 WIB

CVE-2024-57875

block: RCU protect disk->conv_zones_bitmap

In the Linux kernel, the following vulnerability has been resolved: block: RCU protect disk->conv_zones_bitmap Ensure that a disk revalidation changing the conventional zones bitmap of a disk does not cause invalid memory references when using the disk_zone_is_conv() helper by RCU protecting the disk->conv_zones_bitm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:49:01.655Z. Updated 2026-10-15T21:51:49.436Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:47 WIB

CVE-2024-57874

arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL

In the Linux kernel, the following vulnerability has been resolved: arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL Currently tagged_addr_ctrl_set() doesn't initialize the temporary 'ctrl' variable, and a SETREGSET call with a length of zero will leave this uninitialized. Consequently tagged_addr_ctr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:47:10.665Z. Updated 2026-05-11T20:59:33.828Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:31 WIB

CVE-2024-57872

scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove() This will ensure that the scsi host is cleaned up properly using scsi_host_dev_release(). Otherwise, it may lead to memory leaks.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:31:00.610Z. Updated 2026-05-11T20:59:32.700Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

HighPublished 11 Jan 2025, 21:30 WIB

CVE-2024-57850

jffs2: Prevent rtime decompress memory corruption

In the Linux kernel, the following vulnerability has been resolved: jffs2: Prevent rtime decompress memory corruption The rtime decompression routine does not fully check bounds during the entirety of the decompression pass and can corrupt memory outside the decompression buffer if the compressed data is corrupted. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:30:59.271Z. Updated 2026-08-05T11:46:41.207Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:46 WIB

Official record

HighPublished 11 Jan 2025, 21:30 WIB

CVE-2024-57849

s390/cpum_sf: Handle CPU hotplug remove during sampling

In the Linux kernel, the following vulnerability has been resolved: s390/cpum_sf: Handle CPU hotplug remove during sampling CPU hotplug remove handling triggers the following function call sequence: CPUHP_AP_PERF_S390_SF_ONLINE --> s390_pmu_sf_offline_cpu() ... CPUHP_AP_PERF_ONLINE --> perf_event_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:30:58.365Z. Updated 2026-10-15T21:51:49.282Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

CritPublished 11 Jan 2025, 21:30 WIB

CVE-2024-57843

virtio-net: fix overflow inside virtnet_rq_alloc

In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix overflow inside virtnet_rq_alloc When the frag just got a page, then may lead to regression on VM. Specially if the sysctl net.core.high_order_alloc_disable value is 1, then the frag always get a page when do refill. Which could see …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:30:57.255Z. Updated 2026-08-05T11:46:39.052Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:46 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:30 WIB

CVE-2024-57839

Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()"

In the Linux kernel, the following vulnerability has been resolved: Revert "readahead: properly shorten readahead when falling back to do_page_cache_ra()" This reverts commit 7c877586da3178974a8a94577b6045a48377ff25. Anders and Philippe have reported that recent kernels occasionally hang when used with NFS in readah…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:30:56.149Z. Updated 2026-05-11T20:59:23.493Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record

UnscoredPublished 11 Jan 2025, 21:08 WIB

CVE-2024-57838

s390/entry: Mark IRQ entries to fix stack depot warnings

In the Linux kernel, the following vulnerability has been resolved: s390/entry: Mark IRQ entries to fix stack depot warnings The stack depot filters out everything outside of the top interrupt context as an uninteresting or irrelevant part of the stack traces. This helps with stack trace de-duplication, avoiding an e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-11T14:08:56.951Z. Updated 2026-05-11T20:59:22.356Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:59 WIB

Official record