Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 21–40 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 30 Sep 2025, 20:17 WIB

CVE-2025-9232

Out-of-bounds read in HTTP client no_proxy handling

Issue summary: An application using the OpenSSL HTTP client API functions may trigger an out-of-bounds read if the 'no_proxy' environment variable is set and the host portion of the authority component of the HTTP URL is an IPv6 address. Impact summary: An out-of-bounds read can trigger a crash which leads to Denial o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T13:17:19.172Z. Updated 2026-10-15T01:02:23.968Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:02 WIB

Official record

UnscoredPublished 30 Sep 2025, 20:17 WIB

CVE-2025-9231

Timing side-channel in SM2 algorithm on 64 bit ARM

Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm implementation on 64 bit ARM platforms. Impact summary: A timing side-channel in SM2 signature computations on 64 bit ARM platforms could allow recovering the private key by an attacker.. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 21 to 40 of 4319.First page Next page

Published 2025-09-30T13:17:12.007Z. Updated 2026-07-14T12:39:17.450Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Jul 2026, 19:39 WIB

Official record

UnscoredPublished 30 Sep 2025, 20:17 WIB

CVE-2025-9230

Out-of-bounds read & write in RFC 3211 KEK Unwrap

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption whic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T13:17:00.808Z. Updated 2026-10-15T01:02:22.327Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:02 WIB

Official record

CritPublished 30 Sep 2025, 20:03 WIB

CVE-2025-34217

Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T13:03:05.213Z. Updated 2025-11-17T23:56:35.568Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 06:56 WIB

Official record

UnscoredPublished 30 Sep 2025, 19:49 WIB

CVE-2025-10859

Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T12:49:07.059Z. Updated 2026-04-13T14:31:38.944Z.

CVSS—KEVNot listedEPSSPresentUpdated13 Apr 2026, 21:31 WIB

Official record

UnscoredPublished 30 Sep 2025, 19:49 WIB

CVE-2025-11153

JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T12:49:06.524Z. Updated 2026-08-04T16:00:57.670Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Aug 2026, 23:00 WIB

Official record

UnscoredPublished 30 Sep 2025, 19:49 WIB

CVE-2025-11152

Sandbox escape due to integer overflow in the Graphics: Canvas2D component

Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T12:49:05.895Z. Updated 2026-04-13T14:30:14.469Z.

CVSS—KEVNot listedEPSSPresentUpdated13 Apr 2026, 21:30 WIB

Official record

MedPublished 30 Sep 2025, 19:10 WIB

CVE-2025-10217

CVE-2025-10217

A vulnerability exists in Asset Suite for an authenticated user to manipulate the content of performance related log data or to inject crafted data in logfile for potentially carrying out further malicious attacks. Performance logging is typically enabled for troubleshooting purposes while resolving application perform…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T12:10:23.803Z. Updated 2025-10-28T10:28:45.480Z.

CVSS6v4.0KEVNot listedEPSSPresentUpdated28 Oct 2025, 17:28 WIB

Official record

HighPublished 30 Sep 2025, 18:18 WIB

CVE-2025-41098

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a misuse of the general enquiry web service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:18:20.965Z. Updated 2025-09-30T19:23:33.563Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:23 WIB

Official record

HighPublished 30 Sep 2025, 18:17 WIB

CVE-2025-41099

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the list of permissions using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:17:30.044Z. Updated 2025-09-30T19:24:03.057Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:24 WIB

Official record

HighPublished 30 Sep 2025, 18:16 WIB

CVE-2025-41097

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic employee details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:16:55.358Z. Updated 2025-09-30T19:24:28.801Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:24 WIB

Official record

HighPublished 30 Sep 2025, 18:16 WIB

CVE-2025-41096

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to the dates of the current contract details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:16:31.984Z. Updated 2025-09-30T19:24:49.948Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:24 WIB

Official record

HighPublished 30 Sep 2025, 18:15 WIB

CVE-2025-41095

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to planning counter details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:15:55.509Z. Updated 2025-09-30T19:25:16.750Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:25 WIB

Official record

HighPublished 30 Sep 2025, 18:14 WIB

CVE-2025-41094

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to functional contract details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:14:33.108Z. Updated 2025-09-30T19:24:40.970Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:24 WIB

Official record

HighPublished 30 Sep 2025, 18:13 WIB

CVE-2025-41093

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to basic contract details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:13:48.555Z. Updated 2025-09-30T19:22:52.080Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:22 WIB

Official record

HighPublished 30 Sep 2025, 18:12 WIB

CVE-2025-41092

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to time records details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:12:59.221Z. Updated 2025-09-30T19:21:12.468Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:21 WIB

Official record

HighPublished 30 Sep 2025, 18:10 WIB

CVE-2025-41091

Insecure Direct Object Reference in GPS BOLD Workplanner

Insecure Direct Object Reference (IDOR) vulnerability in BOLD Workplanner in versions prior to 2.5.25 (4935b438f9b), consisting of a lack of adequate validation of user input, allowing an authenticated user to access to calendar details using unauthorised internal identifiers.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T11:10:49.088Z. Updated 2025-09-30T19:18:22.090Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:18 WIB

Official record

HighPublished 30 Sep 2025, 17:05 WIB

CVE-2025-8122

Blind SQL Injection in PAD CMS

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:05:21.046Z. Updated 2025-09-30T19:16:36.187Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:16 WIB

Official record

HighPublished 30 Sep 2025, 17:05 WIB

CVE-2025-8121

Blind SQL Injection in PAD CMS

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:05:13.295Z. Updated 2025-09-30T19:15:53.681Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:15 WIB

Official record

CritPublished 30 Sep 2025, 17:05 WIB

CVE-2025-8120

Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution.This issue affects all 3 templates: www, bip and ww+bip. This pr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:05:03.496Z. Updated 2025-09-30T19:15:27.470Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:15 WIB

Official record