Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,629 published records · 12 KEV · 3,629 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,629 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3078.5%
High1,02528%
Med1,54142%
Low1123.1%
None10.03%
Legacy00.00%
Unscored64318%

Matching records by UTC month

Aug 253,629

Signal coverage

KEV-listed: 12
With a forecast: 3,629
Unknown date: 0
Unscored severity: 643

Share of cohort: KEV 0.33% · forecast 100% · unscored 18%.

Showing 2321–2340 of 3,629By severity band: Critical · 9.0–10.0 307, High · 7.0–8.9 1,025, Medium · 4.0–6.9 1,541, Low · 0.1–3.9 112, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 643

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50610

CVE-2025-50610

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:40:56.299Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:40 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50611

CVE-2025-50611

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Deni…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2321 to 2340 of 3629.First page Next page

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:43:17.971Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:43 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50612

CVE-2025-50612

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set in the payload, which may cause the program to crash and potentially lead to a Denial of Service (DoS) …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:48:30.392Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:48 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50613

CVE-2025-50613

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_key_wep in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:50:35.519Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:50 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50614

CVE-2025-50614

A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:52:32.307Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:52 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50615

CVE-2025-50615

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_mac_filter_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:16:56.549Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:16 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50616

CVE-2025-50616

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_advanced_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:19:07.925Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:19 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50617

CVE-2025-50617

A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wps_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:22:21.872Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:22 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50635

CVE-2025-50635

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-serv…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:37:01.869Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:37 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50690

CVE-2025-50690

A Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference.org) versions prior to 2025-05-17 (commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491). The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a specially formed UR…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:13:44.490Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:13 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-50946

CVE-2025-50946

OS Command Injection in Olivetin 2025.4.22 Custom Themes via the ParseRequestURI function in service/internal/executor/arguments.go.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:20:45.643Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:20 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-51451

CVE-2025-51451

In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2026-07-05T01:09:13.572Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:09 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-51452

CVE-2025-51452

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2026-08-04T14:30:36.933Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Aug 2026, 21:30 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-51691

CVE-2025-51691

Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before rendering it. Successful ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:12:13.492Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:12 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-52385

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the child_process module

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-14T13:58:09.540Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 20:58 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-52386

CVE-2025-52386

CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-13T20:03:31.240Z.

CVSS—KEVNot listedEPSSPresentUpdated14 Aug 2025, 03:03 WIB

Official record

UnscoredPublished 13 Aug 2025, 07:00 WIB

CVE-2025-52392

CVE-2025-52392

Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to CWE-307: Improper Restrictio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-13T00:00:00.000Z. Updated 2025-08-19T15:30:35.355Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2025, 22:30 WIB

Official record

CritPublished 13 Aug 2025, 05:54 WIB

CVE-2025-49457

Zoom Clients for Windows - Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access

Excerpt language: en.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-12T22:54:20.362Z. Updated 2026-02-26T17:48:42.934Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:48 WIB

Official record

MedPublished 13 Aug 2025, 05:52 WIB

CVE-2025-49456

Zoom Clients for Windows- Race Condition

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-12T22:52:22.718Z. Updated 2025-08-13T13:24:11.169Z.

CVSS6.2v3.1KEVNot listedEPSSPresentUpdated13 Aug 2025, 20:24 WIB

Official record

MedPublished 13 Aug 2025, 05:33 WIB

CVE-2025-54238

Dimension | Out-of-bounds Read (CWE-125)

Dimension versions 4.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-12T22:33:09.215Z. Updated 2025-08-13T13:24:54.076Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated13 Aug 2025, 20:24 WIB

Official record