Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 2241–2260 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

HighPublished 08 Nov 2025, 00:47 WIB

CVE-2025-64347

Apollo Router Improperly Enforces Renamed Access Control Directives

Apollo Router Core is a configurable Rust graph router written to run a federated supergraph using Apollo Federation 2. Versions 1.61.12-rc.0 and below and 2.8.1-rc.0 allow unauthorized access to protected data through schema elements with access control directives (@authenticated, @requiresScopes, and @policy) that we…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T17:47:28.360Z. Updated 2025-11-07T18:25:59.775Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated08 Nov 2025, 01:25 WIB

Official record

MedPublished 07 Nov 2025, 23:32 WIB

CVE-2025-12862

projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 2241 to 2260 of 3020.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T16:32:06.297Z. Updated 2026-02-24T06:24:48.942Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 13:24 WIB

Official record

CritPublished 07 Nov 2025, 23:28 WIB

CVE-2025-3222

Smallworld SWMFS Improper Authentication

Improper Authentication vulnerability in GE Vernova Smallworld on Windows, Linux allows Authentication Abuse.This issue affects Smallworld: 5.3.3 and prior versions for Linux, and 5.3.4. and prior versions for Windows.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T16:28:45.217Z. Updated 2025-11-13T17:16:35.591Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated14 Nov 2025, 00:16 WIB

Official record

MedPublished 07 Nov 2025, 23:28 WIB

CVE-2025-7719

Smallworld SWMFS Arbitrary File Ops

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulation.This issue affects Smallworld: 5.3.5. and previous versions.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T16:28:03.432Z. Updated 2025-11-13T17:17:12.293Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated14 Nov 2025, 00:17 WIB

Official record

MedPublished 07 Nov 2025, 23:02 WIB

CVE-2025-12861

DedeBIZ spec_add.php sql injection

A vulnerability was determined in DedeBIZ up to 6.3.2. Affected by this vulnerability is an unknown functionality of the file /admin/spec_add.php. This manipulation of the argument flags[] causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilize…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T16:02:05.050Z. Updated 2026-02-24T06:24:35.494Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 13:24 WIB

Official record

MedPublished 07 Nov 2025, 22:16 WIB

CVE-2025-47207

File Station 5

A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:16:08.604Z. Updated 2025-11-07T15:56:40.737Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:56 WIB

Official record

CritPublished 07 Nov 2025, 22:15 WIB

CVE-2025-52425

QuMagie

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

Excerpt language: en.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:15:57.937Z. Updated 2025-11-07T15:55:26.440Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:55 WIB

Official record

LowPublished 07 Nov 2025, 22:15 WIB

CVE-2025-52865

File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

Excerpt language: en.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:15:20.701Z. Updated 2025-11-07T15:55:41.114Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:55 WIB

Official record

LowPublished 07 Nov 2025, 22:15 WIB

CVE-2025-53408

File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

Excerpt language: en.

Severity low: primary CNA CVSS 1.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:15:11.361Z. Updated 2025-11-07T15:43:49.566Z.

CVSS1.3v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:43 WIB

Official record

MedPublished 07 Nov 2025, 22:14 WIB

CVE-2025-53409

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:14:44.914Z. Updated 2025-11-07T15:56:12.638Z.

CVSS4.9v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:56 WIB

Official record

MedPublished 07 Nov 2025, 22:14 WIB

CVE-2025-53410

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:14:20.754Z. Updated 2025-11-07T15:56:28.129Z.

CVSS4.9v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:56 WIB

Official record

LowPublished 07 Nov 2025, 22:13 WIB

CVE-2025-53411

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:13:57.618Z. Updated 2025-11-07T15:56:50.992Z.

CVSS1.2v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:56 WIB

Official record

LowPublished 07 Nov 2025, 22:13 WIB

CVE-2025-53412

File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 and later

Excerpt language: en.

Severity low: primary CNA CVSS 0.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:13:34.575Z. Updated 2025-11-07T15:57:02.038Z.

CVSS0.6v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:57 WIB

Official record

MedPublished 07 Nov 2025, 22:13 WIB

CVE-2025-53413

File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:13:03.060Z. Updated 2025-11-07T15:57:08.616Z.

CVSS4.9v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:57 WIB

Official record

HighPublished 07 Nov 2025, 22:12 WIB

CVE-2025-54167

Notification Center

A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: Notificatio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:12:39.176Z. Updated 2025-11-07T15:57:14.662Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:57 WIB

Official record

LowPublished 07 Nov 2025, 22:12 WIB

CVE-2025-54168

QuLog Center

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:12:10.966Z. Updated 2025-11-07T15:57:21.137Z.

CVSS2.2v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:57 WIB

Official record

LowPublished 07 Nov 2025, 22:11 WIB

CVE-2025-57706

File Station 5

A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5018 a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:11:47.864Z. Updated 2025-11-07T15:57:28.627Z.

CVSS2.2v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 22:57 WIB

Official record

MedPublished 07 Nov 2025, 22:11 WIB

CVE-2025-57712

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.3 ( 2025/08/28 ) an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:11:14.888Z. Updated 2025-11-07T16:11:21.520Z.

CVSS4v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 23:11 WIB

Official record

LowPublished 07 Nov 2025, 22:10 WIB

CVE-2025-58463

Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Download Station…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:10:42.856Z. Updated 2025-11-07T16:11:30.915Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 23:11 WIB

Official record

HighPublished 07 Nov 2025, 22:10 WIB

CVE-2025-58464

QuMagie

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-07T15:10:10.396Z. Updated 2025-11-07T16:11:39.344Z.

CVSS7.8v4.0KEVNot listedEPSSPresentUpdated07 Nov 2025, 23:11 WIB

Official record