Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2941–2960 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

MedPublished 10 Sep 2025, 02:59 WIB

CVE-2025-34173

Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information Disclosure

In pfSense CE /usr/local/www/snort/snort_ip_reputation.php, the value of the iplist parameter is not sanitized of directory traversal-related characters/strings before being used to check if a file exists. While the contents of the file cannot be read, the server reveals whether a file exists, which allows an attacker …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:59:14.136Z. Updated 2026-07-14T22:25:49.597Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

HighPublished 10 Sep 2025, 02:56 WIB

CVE-2025-58760

Tautulli vulnerable to Unauthenticated Path Traversal in `/image` endpoint

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The `/image` API endpoint in Tautulli v2.15.3 and earlier is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. In Tautulli, the `/image` API endpoint is used to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2941 to 2960 of 4319.First page Next page

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:56:57.962Z. Updated 2025-09-10T20:18:02.075Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated11 Sep 2025, 03:18 WIB

Official record

MedPublished 10 Sep 2025, 02:54 WIB

CVE-2025-58753

copyparty: Sharing a single file does not fully restrict access to other files in source folder

Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. It was not possible …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:54:36.056Z. Updated 2025-09-10T20:17:30.500Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated11 Sep 2025, 03:17 WIB

Official record

HighPublished 10 Sep 2025, 02:54 WIB

CVE-2025-53913

Calix GigaCenter ONT (Quantenna SoC) - Excessive Privileges

Excessive Privileges vulnerability in Calix GigaCenter ONT (Quantenna SoC modules) allows Privilege Abuse.This issue affects GigaCenter ONT: 844E, 844G, 844GE, 854GE, 812G, 813G, 818G.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:54:01.838Z. Updated 2025-09-12T13:54:40.859Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:54 WIB

Official record

MedPublished 10 Sep 2025, 02:52 WIB

CVE-2025-58759

TinyEnv: Inline comments not stripped properly in .env values

TinyEnv is an environment variable loader for PHP applications. In versions 1.0.9 and 1.0.10, TinyEnv did not properly strip inline comments inside .env values. This could lead to unexpected behavior or misconfiguration, where variables contain unintended characters (including # or comment text). Applications depending…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:52:39.014Z. Updated 2025-09-10T20:15:16.418Z.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated11 Sep 2025, 03:15 WIB

Official record

MedPublished 10 Sep 2025, 02:50 WIB

CVE-2025-58758

TinyEnv: Missing .env file not required — may cause unexpected behavior

TinyEnv is an environment variable loader for PHP applications. In versions 1.0.1, 1.0.2, 1.0.9, and 1.0.10, TinyEnv did not require the `.env` file to exist when loading environment variables. This could lead to unexpected behavior where the application silently ignores missing configuration, potentially causing insec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:50:18.518Z. Updated 2025-09-10T20:14:26.393Z.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated11 Sep 2025, 03:14 WIB

Official record

MedPublished 10 Sep 2025, 02:46 WIB

CVE-2025-58442

Saleor has user enumeration vulnerability due to different error messages

Saleor is an e-commerce platform. Starting in version 3.21.0 and prior to version 3.21.16, requesting certain fields in the response of `accountRegister` may result in errors that could unintentionally reveal whether a user with the provided email already exists in Saleor. Version 3.21.16 fixes the issue. As a workarou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:46:45.798Z. Updated 2025-09-10T13:50:40.777Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 20:50 WIB

Official record

MedPublished 10 Sep 2025, 02:43 WIB

CVE-2025-58435

Open OnDemand didn't rotate password for VNC batch_connect

Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than version 3.1.2. The likelihood of exploitation is low as a user would need to share their link to an active desktop session and the other user…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:43:47.379Z. Updated 2025-09-10T13:54:22.197Z.

CVSS4.1v4.0KEVNot listedEPSSPresentUpdated10 Sep 2025, 20:54 WIB

Official record

MedPublished 10 Sep 2025, 02:43 WIB

CVE-2025-34172

Netgate pfSense CE HAProxy Package 0.63_10 Reflected Cross-Site Scripting

In pfSense CE /usr/local/www/haproxy/haproxy_stats.php, the value of the showsticktablecontent parameter is displayed after being read from HTTP GET requests. This can enable reflected cross-site scripting when the victim is authenticated.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:43:30.508Z. Updated 2026-07-14T22:25:48.912Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

HighPublished 10 Sep 2025, 02:37 WIB

CVE-2025-58430

listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover

listmonk is a standalone, self-hosted, newsletter and mailing list manager. In versions up to and including 1.1.0, every http request in addition to the session cookie `session` there included `nonce`. The value is not checked and validated by the backend, removing `nonce` allows the requests to be processed correctly.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:37:45.468Z. Updated 2025-09-10T13:55:42.949Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated10 Sep 2025, 20:55 WIB

Official record

HighPublished 10 Sep 2025, 02:34 WIB

CVE-2025-58180

OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename becomes included in a c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:34:14.765Z. Updated 2025-09-10T13:59:11.561Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated10 Sep 2025, 20:59 WIB

Official record

MedPublished 10 Sep 2025, 02:32 WIB

CVE-2025-36011

IBM Jazz for Service Management information disclosure

IBM Jazz for Service Management 1.1.3.0 through 1.1.3.24 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:32:16.786Z. Updated 2025-09-10T13:59:38.169Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 20:59 WIB

Official record

MedPublished 10 Sep 2025, 02:27 WIB

CVE-2025-36125

IBM Hardware Management Console - Power Systems cross-site scripting

IBM Hardware Management Console - Power 10.3.1050.0 and 11.1.1110.0 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted sessi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:27:58.502Z. Updated 2025-09-09T19:41:48.323Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 02:41 WIB

Official record

HighPublished 10 Sep 2025, 02:27 WIB

CVE-2025-58063

CoreDNS: DNS Cache Pinning via etcd Lease ID Confusion

CoreDNS is a DNS server that chains plugins. Starting in version 1.2.0 and prior to version 1.12.4, the CoreDNS etcd plugin contains a TTL confusion vulnerability where lease IDs are incorrectly used as TTL values, enabling DNS cache pinning attacks. This effectively creates a DoS condition for DNS resolution of affect…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:27:18.124Z. Updated 2025-09-10T14:26:13.850Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 21:26 WIB

Official record

MedPublished 10 Sep 2025, 02:20 WIB

CVE-2025-47415

RECWAVE Filepath Traversal

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in CRESTRON TOUCHSCREENS x70 allows Relative Path Traversal.This issue affects TOUCHSCREENS x70: from 3.000.0110.001 before 3.001.0031.001. Confirmed Affected Hardware: TSW-760, TSW-1060 Confirmed Affected Firmwa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:20:35.244Z. Updated 2025-09-10T15:47:05.306Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated10 Sep 2025, 22:47 WIB

Official record

MedPublished 10 Sep 2025, 02:14 WIB

CVE-2025-55054

CVE-2025-55054

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:14:20.330Z. Updated 2025-09-10T14:03:32.964Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 21:03 WIB

Official record

MedPublished 10 Sep 2025, 02:10 WIB

CVE-2025-55053

CVE-2025-55053

CWE-328: Use of Weak Hash

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:10:49.874Z. Updated 2025-09-10T14:03:48.775Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 21:03 WIB

Official record

MedPublished 10 Sep 2025, 02:08 WIB

CVE-2025-43786

CVE-2025-43786

Enumeration of ERC from object entry in Liferay Portal 7.4.0 through 7.4.3.128, and Liferay DXP 2024.Q3.0 through 2024.Q3.1, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 and 7.4 GA through update 92 allow attackers to determine existent ERC in the application by exploit the time response.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:08:52.916Z. Updated 2025-09-10T15:57:41.835Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated10 Sep 2025, 22:57 WIB

Official record

MedPublished 10 Sep 2025, 02:06 WIB

CVE-2025-55052

CVE-2025-55052

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:06:18.558Z. Updated 2025-09-10T20:13:26.229Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated11 Sep 2025, 03:13 WIB

Official record

CritPublished 10 Sep 2025, 02:01 WIB

CVE-2025-55051

CVE-2025-55051

CWE-1392: Use of Default Credentials

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-09T19:01:43.249Z. Updated 2025-09-10T14:29:10.806Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated10 Sep 2025, 21:29 WIB

Official record