Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 201–220 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

HighPublished 26 Nov 2025, 08:28 WIB

CVE-2025-12848

XSS vulnerability when rendering filename in Webform Multiform

Webform Multiple File Upload module for Drupal 7.x contains a cross-site scripting (XSS) vulnerability in the file name renderer. An unauthenticated attacker can exploit this vulnerability by uploading a file with a malicious filename containing JavaScript code (e.g., "<img src=1 onerror=alert(document.domain)>") to a …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T01:28:33.628Z. Updated 2026-03-26T20:52:30.614Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated27 Mar 2026, 03:52 WIB

Official record

HighPublished 26 Nov 2025, 08:19 WIB

CVE-2025-66269

Unquoted Service Path in UPSilon2000V6.0(RupsMon and USBMate) running as SYSTEM

The RupsMon and USBMate services in UPSilon 2000 run with SYSTEM privileges and contain unquoted service paths. This allows a local attacker to perform path interception and escalate privileges if they have write permissions to the directories proceeding that of which the real service executables live in

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 201 to 220 of 3020.First page Next page

Published 2025-11-26T01:19:18.496Z. Updated 2025-11-26T14:30:14.483Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:30 WIB

Official record

CritPublished 26 Nov 2025, 08:16 WIB

CVE-2025-66266

Insecure SYSTEM Service Permissions in UPSilon2000V6.0 (RupsMon.exe) leading to trivial Local Privilege Escalation

The RupsMon.exe service executable in UPSilon 2000 has insecure permissions, allowing the 'Everyone' group Full Control. A local attacker can replace the executable with a malicious binary to execute code with SYSTEM privileges or simply change the config path of the service to a command; starting and stopping the serv…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T01:16:40.731Z. Updated 2025-11-26T15:28:25.062Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:28 WIB

Official record

MedPublished 26 Nov 2025, 08:12 WIB

CVE-2025-66265

Insecure permissions in configuration directory (C:\\usr)

CMService.exe creates the C:\\usr directory and subdirectories with insecure permissions, granting write access to all authenticated users. This allows attackers to replace configuration files (such as snmp.conf) or hijack DLLs to escalate privileges.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T01:12:50.505Z. Updated 2025-11-26T15:31:02.065Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:31 WIB

Official record

HighPublished 26 Nov 2025, 08:09 WIB

CVE-2025-66264

Unquoted Service path in UPSilon2000V6.0 SYSTEM privilege service

The CMService.exe service runs with SYSTEM privileges and contains an unquoted service path. This allows a local attacker with write privileges to the filesystem to insert a malicious executable in the path, leading to privilege escalation.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T01:09:51.506Z. Updated 2025-11-26T16:09:51.264Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:09 WIB

Official record

HighPublished 26 Nov 2025, 07:52 WIB

CVE-2025-66263

Unauthenticated Arbitrary File Read via Null Byte Injection

Unauthenticated Arbitrary File Read via Null Byte Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Null byte injection in download_setting.php allows reading arbitrary files. The `/var/tdf/download…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:52:24.390Z. Updated 2025-11-26T16:10:21.364Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:10 WIB

Official record

CritPublished 26 Nov 2025, 07:50 WIB

CVE-2025-66262

Arbitrary File Overwrite via Tar Extraction Path Traversal

Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Tar extraction with -C / allow arbitrary file overwrite via crafted archive. The `restore_mozzi_mem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:50:55.913Z. Updated 2025-11-26T14:57:11.139Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:57 WIB

Official record

CritPublished 26 Nov 2025, 07:49 WIB

CVE-2025-66261

Unauthenticated OS Command Injection (restore_settings.php)

Unauthenticated OS Command Injection (restore_settings.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform URL-decoded name parameter passed to exec() allows remote code execution. The `/var/tdf/restore_se…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:49:38.259Z. Updated 2025-11-26T15:00:02.948Z.

CVSS9.9v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:00 WIB

Official record

HighPublished 26 Nov 2025, 07:48 WIB

CVE-2025-66260

PostgreSQL SQL Injection (status_sql.php)

PostgreSQL SQL Injection (status_sql.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform SQL injection via sw1 and sw2 parameters in status_sql.php. The `status_sql.php` endpoint constructs SQL UPDATE quer…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:48:34.554Z. Updated 2025-11-26T15:06:21.454Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:06 WIB

Official record

CritPublished 26 Nov 2025, 07:46 WIB

CVE-2025-66259

Authenticated Root Remote Code Execution through improper filtering of HTTP post request parameters

Authenticated Root Remote Code Execution via improrer user input filtering in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform in main_ok.php user supplied data/hour/time is passed directly into date shell comm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:46:51.931Z. Updated 2025-11-26T15:46:56.051Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:46 WIB

Official record

HighPublished 26 Nov 2025, 07:45 WIB

CVE-2025-66258

Stored Cross-Site Scripting via XML Injection

Stored Cross-Site Scripting via XML Injection in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Stored XSS via crafted filenames injected into patchlist.xml. User-controlled filenames are directly concatenate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:45:39.995Z. Updated 2025-11-26T15:47:46.259Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:47 WIB

Official record

CritPublished 26 Nov 2025, 07:43 WIB

CVE-2025-66257

Unauthenticated Arbitrary File Deletion (patch_contents.php)

Unauthenticated Arbitrary File Deletion (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletepatch parameter allows unauthenticated deletion of arbitrary files. The `deletepatch` p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:43:54.408Z. Updated 2025-11-26T15:49:25.857Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:49 WIB

Official record

CritPublished 26 Nov 2025, 07:41 WIB

CVE-2025-66256

Unauthenticated Arbitrary File Upload (patch_contents.php)

Unauthenticated Arbitrary File Upload (patch_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Unrestricted file upload in patch_contents.php allows uploading malicious files. The `/var/tdf/pat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:41:08.666Z. Updated 2025-12-03T16:13:49.513Z.

CVSS9.9v4.0KEVNot listedEPSSPresentUpdated03 Dec 2025, 23:13 WIB

Official record

CritPublished 26 Nov 2025, 07:39 WIB

CVE-2025-66255

Unauthenticated Arbitrary File Upload (upgrade_contents.php)

Unauthenticated Arbitrary File Upload (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Missing signature validation allows uploading malicious firmware packages. The firmware upgrade …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:39:56.984Z. Updated 2025-12-03T16:00:07.473Z.

CVSS9.9v4.0KEVNot listedEPSSPresentUpdated03 Dec 2025, 23:00 WIB

Official record

HighPublished 26 Nov 2025, 07:37 WIB

CVE-2025-66254

Unauthenticated Arbitrary File Deletion (upgrade_contents.php)

Unauthenticated Arbitrary File Deletion (upgrade_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deleteupgrade parameter allows unauthenticated deletion of arbitrary files. The `deleteup…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:37:48.788Z. Updated 2025-12-03T15:55:50.204Z.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated03 Dec 2025, 22:55 WIB

Official record

CritPublished 26 Nov 2025, 07:36 WIB

CVE-2025-66253

Unauthenticated OS Command Injection (start_upgrade.php)

Unauthenticated OS Command Injection (start_upgrade.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform User input passed directly to exec() allows remote code execution via start_upgrade.php. The `/var/td…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:36:29.474Z. Updated 2025-12-03T15:55:18.897Z.

CVSS9.9v4.0KEVNot listedEPSSPresentUpdated03 Dec 2025, 22:55 WIB

Official record

HighPublished 26 Nov 2025, 07:34 WIB

CVE-2025-66252

Infinite Loop Denial of Service via Failed File Deletion

Infinite Loop Denial of Service via Failed File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Infinite loop when unlink() fails in status_contents.php causing DoS. Due to the fact that the unlink…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:34:11.994Z. Updated 2025-12-01T21:11:46.724Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated02 Dec 2025, 04:11 WIB

Official record

HighPublished 26 Nov 2025, 07:32 WIB

CVE-2025-66251

Unauthenticated Path Traversal with Arbitrary File Deletion

Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform The deletehidden parameter allows path traversal deletion of arbitrary .tgz files.

Excerpt language: en.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:32:26.142Z. Updated 2025-11-26T15:03:03.656Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 22:03 WIB

Official record

CritPublished 26 Nov 2025, 07:29 WIB

CVE-2025-66250

Unauthenticated Arbitrary File Upload (status_contents.php)

Unauthenticated Arbitrary File Upload (status_contents.php) in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 1000, 2000, 3000, 3500, 6000, 7000 allows an attacker to perform Allows unauthenticated arbitrary file upload via /var/tdf/status_contents.php.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:29:57.431Z. Updated 2025-11-26T14:56:59.781Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:56 WIB

Official record

CritPublished 26 Nov 2025, 07:20 WIB

CVE-2025-64657

Azure Application Gateway Elevation of Privilege Vulnerability

Stack-based buffer overflow in Azure Application Gateway allows an unauthorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-26T00:20:52.352Z. Updated 2026-02-26T16:07:28.437Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record