Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,774 published records · 14 KEV · 3,774 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,774 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2967.8%
High1,13730%
Med1,44438%
Low962.5%
None00.00%
Legacy00.00%
Unscored80121%

Matching records by UTC month

Jul 253,774

Signal coverage

KEV-listed: 14
With a forecast: 3,774
Unknown date: 0
Unscored severity: 801

Share of cohort: KEV 0.37% · forecast 100% · unscored 21%.

Showing 2041–2060 of 3,774By severity band: Critical · 9.0–10.0 296, High · 7.0–8.9 1,137, Medium · 4.0–6.9 1,444, Low · 0.1–3.9 96, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 801

MedPublished 14 Jul 2025, 16:02 WIB

CVE-2025-7590

PHPGurukul Dairy Farm Shop Management System edit-category.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects some unknown processing of the file edit-category.php. The manipulation of the argument categorycode leads to sql injection. The attack may be initiated remotely. The exploit has bee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T09:02:06.996Z. Updated 2025-07-14T13:38:29.453Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:38 WIB

Official record

MedPublished 14 Jul 2025, 15:44 WIB

CVE-2025-7589

PHPGurukul Dairy Farm Shop Management System edit-company.php sql injection

A vulnerability classified as critical was found in PHPGurukul Dairy Farm Shop Management System 1.3. This vulnerability affects unknown code of the file edit-company.php. The manipulation of the argument companyname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2041 to 2060 of 3774.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:44:06.390Z. Updated 2025-07-14T12:49:19.981Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 19:49 WIB

Official record

MedPublished 14 Jul 2025, 15:32 WIB

CVE-2025-7588

PHPGurukul Dairy Farm Shop Management System edit-product.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This affects an unknown part of the file edit-product.php. The manipulation of the argument productname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:32:06.859Z. Updated 2025-07-14T12:50:02.354Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 19:50 WIB

Official record

HighPublished 14 Jul 2025, 15:19 WIB

CVE-2024-26292

Authenticated Arbitrary File Deletion affecting Avid NEXIS

An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:19:58.940Z. Updated 2025-07-14T15:07:16.152Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 22:07 WIB

Official record

MedPublished 14 Jul 2025, 15:15 WIB

CVE-2025-24391

Possible user enumeration

A vulnerability in the External Interface of OTRS allows conclusions to be drawn about the existence of user accounts through different HTTP response codes and messages. This enables an attacker to systematically identify valid email addresses. This issue affects: * OTRS 7.0.X * OTRS 8.0.X * OTRS 2023.X …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:15:58.668Z. Updated 2025-07-14T12:58:02.638Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated14 Jul 2025, 19:58 WIB

Official record

MedPublished 14 Jul 2025, 15:14 WIB

CVE-2025-7587

code-projects Online Appointment Booking System cover.php sql injection

A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cover.php. The manipulation of the argument uname/psw leads to sql injection. The attack may be launched remotely. The exploit has been discl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:14:05.663Z. Updated 2025-07-14T15:02:01.961Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 22:02 WIB

Official record

HighPublished 14 Jul 2025, 15:12 WIB

CVE-2024-26291

Authenticated Arbitrary File Read affecting Avid NEXIS

An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers are able to obtain sensiti…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:12:16.139Z. Updated 2025-07-14T15:06:09.582Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 22:06 WIB

Official record

HighPublished 14 Jul 2025, 15:02 WIB

CVE-2025-7586

Tenda AC500 setWtpData formSetAPCfg stack-based overflow

A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the file /goform/setWtpData. The manipulation of the argument radio_2g_1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has bee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T08:02:06.975Z. Updated 2025-07-14T15:22:29.586Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 22:22 WIB

Official record

MedPublished 14 Jul 2025, 14:44 WIB

CVE-2025-7585

PHPGurukul Online Fire Reporting System manage-site.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /admin/manage-site.php. The manipulation of the argument webtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T07:44:06.390Z. Updated 2025-07-14T15:42:16.310Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 22:42 WIB

Official record

MedPublished 14 Jul 2025, 14:32 WIB

CVE-2025-7584

PHPGurukul Online Fire Reporting System add-team.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /admin/add-team.php. The manipulation of the argument teammember leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T07:32:07.148Z. Updated 2025-07-14T16:40:32.911Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 23:40 WIB

Official record

MedPublished 14 Jul 2025, 14:14 WIB

CVE-2025-7583

PHPGurukul Online Fire Reporting System all-requests.php sql injection

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /admin/all-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T07:14:06.498Z. Updated 2025-07-14T16:44:42.278Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 23:44 WIB

Official record

MedPublished 14 Jul 2025, 14:02 WIB

CVE-2025-7582

PHPGurukul Online Fire Reporting System assigned-requests.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/assigned-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T07:02:06.863Z. Updated 2025-07-14T16:49:32.482Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 23:49 WIB

Official record

MedPublished 14 Jul 2025, 13:44 WIB

CVE-2025-7581

code-projects Voting System positions_edit.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positions_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclose…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T06:44:05.617Z. Updated 2025-07-14T13:00:41.541Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:00 WIB

Official record

MedPublished 14 Jul 2025, 13:32 WIB

CVE-2025-7580

code-projects Voting System positions_row.php sql injection

A vulnerability classified as critical was found in code-projects Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions_row.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T06:32:05.955Z. Updated 2025-07-14T13:04:17.428Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:04 WIB

Official record

MedPublished 14 Jul 2025, 13:14 WIB

CVE-2025-7579

chinese-poetry server.js redos

A vulnerability was found in chinese-poetry 0.1. It has been rated as problematic. This issue affects some unknown processing of the file rank/server.js. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be use…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T06:14:06.008Z. Updated 2025-07-14T13:08:00.410Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:08 WIB

Official record

LowPublished 14 Jul 2025, 13:02 WIB

CVE-2025-7578

Teledyne FLIR FB-Series O/FLIR FH-Series ID runcmd.sh sendCommand command injection

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely. The complexity of an …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T06:02:05.427Z. Updated 2025-07-14T13:12:51.876Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:12 WIB

Official record

MedPublished 14 Jul 2025, 12:44 WIB

CVE-2025-7577

Teledyne FLIR FB-Series O/FLIR FH-Series ID hard-coded password

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T05:44:05.263Z. Updated 2025-07-14T13:15:20.684Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:15 WIB

Official record

MedPublished 14 Jul 2025, 12:39 WIB

CVE-2025-7380

A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM

A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is subsequently displayed in t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T05:39:07.731Z. Updated 2025-07-14T13:17:13.127Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:17 WIB

Official record

MedPublished 14 Jul 2025, 12:32 WIB

CVE-2025-7576

Teledyne FLIR FB-Series O/FLIR FH-Series ID Production Tools production.html access control

A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16 and classified as critical. Affected by this issue is some unknown functionality of the file /priv/production/production.html of the component Production Tools. The manipulation leads to improper access controls. The attack may be lau…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T05:32:04.781Z. Updated 2025-07-14T13:39:46.398Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:39 WIB

Official record

MedPublished 14 Jul 2025, 12:14 WIB

CVE-2025-7575

Zavy86 WikiDocs submit.php image_delete_ajax path traversal

A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function image_drop_upload_ajax/image_delete_ajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 1.0.78 is able to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-14T05:14:06.413Z. Updated 2025-07-14T13:58:08.605Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated14 Jul 2025, 20:58 WIB

Official record