Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 2941–2960 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

MedPublished 05 Dec 2024, 20:31 WIB

CVE-2024-12228

PHPGurukul Complaint Management System user-search.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. Affected is an unknown function of the file /admin/user-search.php. The manipulation of the argument search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T13:31:09.200Z. Updated 2024-12-05T15:41:28.013Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:41 WIB

Official record

MedPublished 05 Dec 2024, 20:31 WIB

CVE-2024-12227

MSI Dragon Center IOCTL NTIOLib_X64.sys MmUnMapIoSpace null pointer dereference

A vulnerability, which was classified as problematic, was found in MSI Dragon Center up to 2.0.146.0. This affects the function MmUnMapIoSpace in the library NTIOLib_X64.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. It is possible to launch the attack on the local host. Upgradi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2941 to 2960 of 3433.First page Next page

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T13:31:05.008Z. Updated 2024-12-05T15:39:52.179Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:39 WIB

Official record

CritPublished 05 Dec 2024, 19:59 WIB

CVE-2024-51555

Force Change of Default Credentials

Default Credentail vulnerabilities allows access to an Aspect device using publicly available default credentials since the system does not require the installer to change default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:59:44.713Z. Updated 2025-08-28T14:38:07.783Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 Aug 2025, 21:38 WIB

Official record

HighPublished 05 Dec 2024, 19:58 WIB

CVE-2024-51554

off-by-one-error

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:58:51.342Z. Updated 2024-12-05T14:36:37.414Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:36 WIB

Official record

CritPublished 05 Dec 2024, 19:57 WIB

CVE-2024-51551

Default Credentials

Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:57:06.089Z. Updated 2024-12-05T15:01:42.017Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:01 WIB

Official record

CritPublished 05 Dec 2024, 19:56 WIB

CVE-2024-51550

Data Validation / Sanitization

Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:56:07.332Z. Updated 2024-12-05T15:05:36.860Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:05 WIB

Official record

CritPublished 05 Dec 2024, 19:54 WIB

CVE-2024-51549

Absolute Path Traversal

Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:54:31.077Z. Updated 2024-12-05T15:09:13.063Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:09 WIB

Official record

HighPublished 05 Dec 2024, 19:52 WIB

CVE-2024-51548

Dangerous File Upload

Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:52:54.929Z. Updated 2024-12-05T14:39:56.202Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:39 WIB

Official record

HighPublished 05 Dec 2024, 19:51 WIB

CVE-2024-51546

Credentails Disclosure

Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:51:39.054Z. Updated 2024-12-05T14:43:58.312Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:43 WIB

Official record

CritPublished 05 Dec 2024, 19:49 WIB

CVE-2024-51545

Username Enumeration

Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:49:25.254Z. Updated 2024-12-05T14:47:33.404Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:47 WIB

Official record

HighPublished 05 Dec 2024, 19:48 WIB

CVE-2024-51544

Service Control

Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:48:32.801Z. Updated 2024-12-05T14:50:27.895Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:50 WIB

Official record

HighPublished 05 Dec 2024, 19:47 WIB

CVE-2024-51543

Information Disclosure

Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:47:06.288Z. Updated 2024-12-05T14:53:38.763Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 21:53 WIB

Official record

HighPublished 05 Dec 2024, 19:45 WIB

CVE-2024-51542

Configuration Download

Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:45:57.616Z. Updated 2024-12-05T15:13:29.563Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:13 WIB

Official record

HighPublished 05 Dec 2024, 19:45 WIB

CVE-2024-51541

Local File Inclusion

Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:45:09.058Z. Updated 2024-12-05T15:16:19.415Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:16 WIB

Official record

HighPublished 05 Dec 2024, 19:44 WIB

CVE-2024-48847

MD5 bypass operation

MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or validates MD5 checksum hashes. Affected products: ABB ASPECT - Enterprise v3.08.01; NEXUS Series v3.08.01; MATRIX Series v3.08.01

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:44:09.099Z. Updated 2024-12-05T15:49:11.073Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated05 Dec 2024, 22:49 WIB

Official record

HighPublished 05 Dec 2024, 19:43 WIB

CVE-2024-48846

Cross Side Request Forgery, CSRF

Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or changing system settings. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:43:20.544Z. Updated 2024-12-05T18:48:59.598Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated06 Dec 2024, 01:48 WIB

Official record

CritPublished 05 Dec 2024, 19:42 WIB

CVE-2024-48845

Weak Password Rules/Strength

Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that could facilitate unauthorized admin/application access. Affected products: ABB ASPECT - Enterprise v3.07.02; NEXUS Series v3.07.02; MATRIX Series v3.07.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:42:14.225Z. Updated 2024-12-05T18:49:08.072Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated06 Dec 2024, 01:49 WIB

Official record

HighPublished 05 Dec 2024, 19:41 WIB

CVE-2024-48844

Denial of Service, DoS

Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:41:12.507Z. Updated 2024-12-05T18:49:17.567Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated06 Dec 2024, 01:49 WIB

Official record

HighPublished 05 Dec 2024, 19:40 WIB

CVE-2024-48843

Denial of Service, DoS

Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:40:01.071Z. Updated 2024-12-05T18:49:24.745Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated06 Dec 2024, 01:49 WIB

Official record

CritPublished 05 Dec 2024, 19:38 WIB

CVE-2024-48840

Unauthorized Access

Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-05T12:38:46.342Z. Updated 2024-12-05T18:49:34.017Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated06 Dec 2024, 01:49 WIB

Official record