Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 2921–2940 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 24 Aug 2026, 05:45 WIB

CVE-2026-78145

CTFd __init__.py _is_safe_url redirect

A vulnerability has been found in CTFd up to 3.8.4. The affected element is the function _is_safe_url of the file CTFd/utils/validators/__init__.py. Such manipulation of the argument Next leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The name …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T22:45:11.793Z. Updated 2026-08-24T18:12:57.182Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:12 WIB

Official record

MedPublished 24 Aug 2026, 05:30 WIB

CVE-2026-78144

code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization

A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be execut…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2921 to 2940 of 12259.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T22:30:09.529Z. Updated 2026-08-26T18:07:57.713Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 01:07 WIB

Official record

MedPublished 24 Aug 2026, 05:15 WIB

CVE-2026-78143

code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection

A vulnerability was determined in code-projects Barangay Resident Profiling Management System 1.0. Affected is an unknown function of the file residents.php of the component Resident Search Functionality. This manipulation of the argument Search causes sql injection. Remote exploitation of the attack is possible. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T22:15:09.608Z. Updated 2026-08-24T17:51:36.192Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 00:51 WIB

Official record

MedPublished 24 Aug 2026, 05:00 WIB

CVE-2026-78142

code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T22:00:12.126Z. Updated 2026-08-24T15:01:41.992Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Aug 2026, 22:01 WIB

Official record

MedPublished 24 Aug 2026, 04:45 WIB

CVE-2026-78141

Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T21:45:09.069Z. Updated 2026-08-27T14:38:00.837Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 21:38 WIB

Official record

UnscoredPublished 24 Aug 2026, 02:53 WIB

CVE-2026-78183

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float

DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float. quote_float() allocates the length of the string + 1, which is the size of the bare numeric symbol plus NULL. But for special literals NaN, Inf, +Inf, -Inf, Infinity, +Infinity, -Infinity it emits the literal surrounded by quotes plus NULL…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T19:53:18.185Z. Updated 2026-08-25T19:32:39.393Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:32 WIB

Official record

MedPublished 24 Aug 2026, 02:45 WIB

CVE-2026-78140

Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine

A flaw has been found in Dromara UJCMS up to 10.1.3. The impacted element is the function update of the file src/main/java/com/ujcms/cms/ext/web/backendapi/WebFileTemplateController.java of the component web-file-template Endpoint. Executing a manipulation can lead to improper neutralization of special elements used in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T19:45:07.529Z. Updated 2026-08-24T19:51:47.518Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 02:51 WIB

Official record

UnscoredPublished 24 Aug 2026, 02:18 WIB

CVE-2026-19565

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey

Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey. CreateSessionAuthKey runs five rounds of SHA-256, each over a fresh Time::HiRes reading formatted to six decimal places, the running digest, and the process id…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T19:18:15.132Z. Updated 2026-08-25T19:31:51.184Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:31 WIB

Official record

UnscoredPublished 24 Aug 2026, 01:16 WIB

CVE-2026-75922

Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line

Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line. PSGI hands PATH_INFO to an application percent-decoded, so a %XX sequence in the client URL has become a raw byte by the time the proxy sees it. The proxy appends th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T18:16:41.474Z. Updated 2026-08-25T19:30:38.767Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Aug 2026, 02:30 WIB

Official record

HighPublished 23 Aug 2026, 20:34 WIB

CVE-2026-9769

justhtml before 1.10.0 Denial of Service via deeply nested HTML

justhtml through 1.9.1 (fixed in 1.10.0) is vulnerable to uncontrolled recursion leading to denial of service. During JustHTML() construction, TreeBuilder.finish() unconditionally calls _populate_selectedcontent(), which recursively traverses the DOM tree via _find_elements()/_find_element() without a depth bound. An a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:15.503Z. Updated 2026-08-24T17:54:01.074Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 00:54 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-8630

justhtml before 1.12.0 Mutation XSS via Raw Text Elements

justhtml before 1.12.0 (versions <= 1.11.0) contains a mutation cross-site scripting (mXSS) vulnerability in the serialization of raw-text elements such as <style> and <script>. When a DOM tree is processed by sanitize_dom() using a custom policy that keeps these elements, text nodes inside them are serialized literall…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:14.556Z. Updated 2026-08-26T18:07:00.039Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 Aug 2026, 01:07 WIB

Official record

CritPublished 23 Aug 2026, 20:34 WIB

CVE-2026-8445

justhtml before 1.12.0 Sanitizer Bypass via Markdown

justhtml versions <= 1.11.0 (fixed in 1.12.0) do not sufficiently escape HTML-significant characters (angle brackets) in text nodes when converting a parsed document to Markdown via to_markdown(). While a small set of Markdown metacharacters are escaped, characters such as < and > are preserved, so untrusted input that…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:13.886Z. Updated 2026-08-24T19:06:17.094Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 02:06 WIB

Official record

CritPublished 23 Aug 2026, 20:34 WIB

CVE-2026-7808

justhtml before 1.16.0 Multiple Security Issues via Sanitization

justhtml before 1.16.0 contains multiple HTML sanitization bypass issues that can allow active/dangerous content (e.g., script or style) to survive sanitization, potentially leading to cross-site scripting. The issues primarily affect advanced usage rather than the default JustHTML(..., sanitize=True) path for ordinary…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:13.232Z. Updated 2026-08-24T18:14:27.467Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:14 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-77088

justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span

justhtml versions 0.9.0 through 1.21.0 contain a cross-site scripting vulnerability in to_markdown() where inline code spans fail to account for blank lines as block boundaries. Attackers can inject blank lines into code or pre element text to break the inline span, causing sanitized HTML to be emitted unescaped and re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:12.574Z. Updated 2026-08-29T11:47:53.161Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 Aug 2026, 18:47 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-74793

justhtml before 3.11.0 XSS via selectedcontent projection

justhtml before 3.11.0 contains a cross-site scripting vulnerability where the default sanitizer bypasses event handler removal in selectedcontent projections. Attackers can inject SVG or MathML elements with event handlers that are cloned and reinserted into output without sanitization, enabling stored or reflected XS…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:11.936Z. Updated 2026-08-24T18:08:10.972Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:08 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-6827

justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities

justhtml before 1.17.0 contains multiple security issues in sanitization, serialization, and programmatic DOM handling. When custom policies preserve foreign namespaces (SVG/MathML), dangerous content such as HTML integration points (SVG <foreignObject>, MathML <annotation-xml encoding="text/html">) and mutation-XSS pa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:11.236Z. Updated 2026-08-29T11:47:34.707Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Aug 2026, 18:47 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-5751

justhtml before 1.14.0 Mutation XSS via custom sanitization policies

justhtml versions 1.13.0 and earlier contain a parser-differential / mutation cross-site scripting (mXSS) vulnerability when using a custom SanitizationPolicy that preserves foreign namespaces (e.g., drop_foreign_namespaces=False with allowlisted SVG/MathML elements or raw-text containers such as <style>). Specially cr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:10.547Z. Updated 2026-08-24T19:03:33.747Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 02:03 WIB

Official record

MedPublished 23 Aug 2026, 20:34 WIB

CVE-2026-5389

justhtml before 1.13.0 XSS via code fence breakout

justhtml versions before 1.13.0 contain a cross-site scripting vulnerability in the to_markdown() function when serializing attacker-controlled pre content. Attackers can place backticks inside sanitized pre elements to break out of fixed-length code fences, allowing raw HTML to execute when the generated Markdown is r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:09.865Z. Updated 2026-08-24T18:15:49.005Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:15 WIB

Official record

CritPublished 23 Aug 2026, 20:34 WIB

CVE-2026-5388

justhtml before 1.15.0 Multiple Security Issues

justhtml before 1.15.0 contains multiple security issues in URL sanitization helpers (clean_url_value/clean_url_in_js_string), HTML serialization, Markdown passthrough (html_passthrough=True), and several custom sanitization-policy edge cases. Depending on configuration, an attacker can bypass sanitization to inject ac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:09.169Z. Updated 2026-08-26T16:16:10.959Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Aug 2026, 23:16 WIB

Official record

HighPublished 23 Aug 2026, 20:34 WIB

CVE-2026-4671

justhtml before 1.18.0 Denial of Service via CSS Selector

justhtml before 1.18.0 contains multiple low-severity denial-of-service issues in CSS selector handling and linkification. Applications that evaluate attacker-controlled selector strings (via query(), matches(), or selector-based transforms), run selector matching over very large untrusted documents, construct DOM tree…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-23T13:34:08.443Z. Updated 2026-08-24T18:09:57.316Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 01:09 WIB

Official record