Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,274 published records · 10 KEV · 4,274 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,274 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2606.1%
High1,18528%
Med1,72740%
Low1373.2%
None20.05%
Legacy00.00%
Unscored96323%

Matching records by UTC month

Oct 254,274

Signal coverage

KEV-listed: 10
With a forecast: 4,274
Unknown date: 0
Unscored severity: 963

Share of cohort: KEV 0.23% · forecast 100% · unscored 23%.

Showing 201–220 of 4,274By severity band: Critical · 9.0–10.0 260, High · 7.0–8.9 1,185, Medium · 4.0–6.9 1,727, Low · 0.1–3.9 137, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 963

MedPublished 31 Oct 2025, 04:22 WIB

CVE-2025-34270

Nagios Log Server < 2024R2.0.2 AD/LDAP Import Password Not Obfuscated

Nagios Log Server versions prior to 2024R2.0.2 contain a vulnerability in the AD/LDAP user import functionality as it fails to obfuscate the password field during import. As a result, the plaintext password supplied for imported accounts may be exposed in the user interface, logs, or other diagnostic output. This can l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:22:28.949Z. Updated 2025-11-17T21:36:24.190Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

MedPublished 31 Oct 2025, 04:22 WIB

CVE-2017-20209

Nagios Fusion < 4.0.1 XSS via Users/Servers Page

Nagios Fusion versions prior to 4.0.1 are vulnerable to cross-site scripting (XSS) via the Users and Servers pages. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:22:07.861Z. Updated 2025-11-17T21:36:22.243Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

MedPublished 31 Oct 2025, 04:21 WIB

CVE-2018-25119

Nagios Fusion < 4.1.5 XSS via fusionwindow Parameter

Nagios Fusion versions prior to 4.1.5 are vulnerable to cross-site scripting (XSS) via the "fusionwindow" parameter. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a victim's browser.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:21:46.769Z. Updated 2025-11-17T21:36:22.437Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

MedPublished 31 Oct 2025, 04:20 WIB

CVE-2023-53689

Nagios Fusion < 4.2.0 License Information Reflected XSS

Nagios Fusion versions prior to 4.2.0 contain a reflected cross-site scripting (XSS) vulnerability in the license key configuration flow that can result in execution of attacker-controlled script in the browser of a user who follows a crafted URL. While the application server itself is not directly corrupted by the ref…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:20:59.302Z. Updated 2025-11-17T21:36:22.771Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

MedPublished 31 Oct 2025, 04:20 WIB

CVE-2023-53690

Nagios Fusion < 4.2.0 LDAP/AD Integration Stored XSS

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability in the LDAP/AD authentication-server configuration. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:20:37.543Z. Updated 2025-11-17T21:36:22.933Z.

CVSS6.2v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

MedPublished 31 Oct 2025, 04:19 WIB

CVE-2023-7312

Nagios Fusion < 4.2.0 Email Settings Stored XSS via SMTP/sendmail

Nagios Fusion versions prior to 4.2.0 contain a stored cross-site scripting (XSS) vulnerability when adding or configuring Email Settings. Unsanitized user input can be stored and later rendered in the administrative UI, causing JavaScript to execute in the browser of any user who views the affected page. An attacker w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:19:51.723Z. Updated 2025-11-17T21:36:23.135Z.

CVSS6.2v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 04:36 WIB

Official record

CritPublished 31 Oct 2025, 04:17 WIB

CVE-2023-7325

Mingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRF

Anheng Mingyu Operation and Maintenance Audit and Risk Control System up to 2023-08-10 contains a server-side request forgery (SSRF) vulnerability in the xmlrpc.sock handler. The product accepts specially crafted XML-RPC requests that can be used to instruct the server to connect to internal unix socket RPC endpoints a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:17:54.830Z. Updated 2026-07-28T01:47:40.981Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 Jul 2026, 08:47 WIB

Official record

CritPublished 31 Oct 2025, 04:16 WIB

CVE-2021-4461

Seeyon Zhiyuan OA Web Application System < 7.0 SP1 Authentication Bypass

Seeyon Zhiyuan OA Web Application System versions up to and including 7.0 SP1 improperly decode and parse the `enc` parameter in thirdpartyController.do. The decoded map values can influence session attributes without sufficient authentication/authorization checks, enabling attackers to assign a session to arbitrary us…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T21:16:23.161Z. Updated 2025-11-28T19:17:19.543Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Nov 2025, 02:17 WIB

Official record

LowPublished 31 Oct 2025, 02:59 WIB

CVE-2025-8850

Insecure API Design in danny-avila/librechat

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly valid…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.1 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T19:59:36.327Z. Updated 2025-11-05T14:57:26.783Z.

CVSS3.1v3.0KEVNot listedEPSSPresentUpdated05 Nov 2025, 21:57 WIB

Official record

HighPublished 31 Oct 2025, 02:22 WIB

CVE-2025-3356

IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view, overwrite, or append to arbitrary files on the system.

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T19:22:37.371Z. Updated 2025-10-30T19:41:12.149Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated31 Oct 2025, 02:41 WIB

Official record

HighPublished 31 Oct 2025, 02:21 WIB

CVE-2025-3355

IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T19:21:42.496Z. Updated 2025-10-30T19:51:08.264Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated31 Oct 2025, 02:51 WIB

Official record

HighPublished 31 Oct 2025, 01:53 WIB

CVE-2025-36137

IBM Sterling Connect:Direct for UNIX command execution

IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectly assigns permissions for maintenance tasks to Control Center Director (CCD) users that could allow a privileged user to escalate their privileges further due to unnecessa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T18:53:32.576Z. Updated 2026-02-26T16:56:46.413Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:56 WIB

Official record

MedPublished 31 Oct 2025, 01:30 WIB

CVE-2025-62265

CVE-2025-62265

Cross-site scripting (XSS) vulnerability in the Blogs widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 36, and older unsupported versions allows remote attackers to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T18:30:35.960Z. Updated 2025-10-30T19:04:48.068Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated31 Oct 2025, 02:04 WIB

Official record

MedPublished 31 Oct 2025, 00:50 WIB

CVE-2025-64118

node-tar vulnerable to race condition leading to uninitialized memory exposure

node-tar is a Tar for Node.js. In 7.5.1, using .t (aka .list) with { sync: true } to read tar entry contents returns uninitialized memory contents if tar file was changed on disk to a smaller size while being read. This vulnerability is fixed in 7.5.2.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:50:20.421Z. Updated 2025-10-30T18:42:19.663Z.

CVSS6.1v4.0KEVNot listedEPSSPresentUpdated31 Oct 2025, 01:42 WIB

Official record

HighPublished 31 Oct 2025, 00:47 WIB

CVE-2025-64112

Statmatic vulnerable to Stored Cross-Site Scripting

Statmatic is a Laravel and Git powered content management system (CMS). Stored XSS vulnerabilities in Collections and Taxonomies allow authenticated users with content creation permissions to inject malicious JavaScript that executes when viewed by higher-privileged users. This vulnerability is fixed in 5.22.1.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:47:01.280Z. Updated 2025-10-30T17:58:06.993Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated31 Oct 2025, 00:58 WIB

Official record

MedPublished 31 Oct 2025, 00:39 WIB

CVE-2025-64115

Movary unvalidated Referer header allows open redirect and phishing

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and facilitate phishing. This vul…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:39:19.330Z. Updated 2025-10-30T19:06:23.834Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated31 Oct 2025, 02:06 WIB

Official record

MedPublished 31 Oct 2025, 00:37 WIB

CVE-2025-62266

CVE-2025-62266

By default, Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2024.Q1.1 through 2024.Q1.5, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions is vulnerable to DNS rebinding attacks, which allows remote attackers to r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:37:21.375Z. Updated 2025-10-30T19:06:43.671Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated31 Oct 2025, 02:06 WIB

Official record

MedPublished 31 Oct 2025, 00:32 WIB

CVE-2025-64116

Movary vulnerable to an open redirect

Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vulnerability is fixed in 0.69.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:32:41.434Z. Updated 2025-10-31T16:50:03.914Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated31 Oct 2025, 23:50 WIB

Official record

HighPublished 31 Oct 2025, 00:10 WIB

CVE-2025-12060

Keras keras.utils.get_file Utility Path Traversal Vulnerability

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special symlinks, which, when …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:10:43.868Z. Updated 2026-02-26T16:56:46.808Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:56 WIB

Official record

HighPublished 31 Oct 2025, 00:09 WIB

CVE-2025-64096

CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to 1.4.2, there is a missing bounds check in Crypto_Key_update() (crypto_key_mgmt.c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-10-30T17:09:24.240Z. Updated 2026-01-09T22:54:42.894Z.

CVSS8.8v3.0KEVNot listedEPSSPresentUpdated10 Jan 2026, 05:54 WIB

Official record

Showing 201 to 220 of 4274.First page Next page