Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 3401–3420 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

CritPublished 22 Oct 2026, 17:57 WIB

CVE-2021-48014

FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer

FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a __CONTENT__ payload to write a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:29.782Z. Updated 2026-10-23T21:15:46.961Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:15 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2021-48013

Weaver E-cology 8.0 Unauthenticated Path Traversal via ln.FileDownload

Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload endpoint. Attackers can send crafted GET requests with directory traversal sequences in fpath to retrieve sensitive files such as WEB-INF/w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3401 to 3420 of 16156.First page Next page

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:29.018Z. Updated 2026-10-29T11:13:18.528Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:13 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2020-37284

Sickbeard build-507 Reflected XSS via testNaming pattern Parameter

Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of /config/postProcessing/testNaming. Attackers can craft GET requests with malicious SVG onload payloads that the testNaming handler returns unescape…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:28.307Z. Updated 2026-10-28T18:01:16.689Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 01:01 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2019-25779

WooThemes Diarise 1.5.9 Local File Disclosure via download.php

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose sensitive files like /etc/passwd. Exploitation …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:27.435Z. Updated 2026-10-22T10:57:27.435Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2019-25778

SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter

SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter. Attackers can send GET requests to /comment/api/index.php with crafted rlist[] values using backtick-quoted variables and extractva…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:26.733Z. Updated 2026-10-23T21:16:06.927Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:16 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2018-25439

MetInfo CMS < 6.1.1 Unauthenticated Path Traversal via thumb.php dir Parameter

MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. Attackers can send crafted requests with backslash sequences bypassing the str_replace filter to read files like config_db.php on Windows. Exp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:26.044Z. Updated 2026-10-29T11:09:34.251Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:09 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2018-25438

Intermesh Group-Office < 3.5.5 Path Traversal via compress.php

Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file' parameter, which is appended t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:25.404Z. Updated 2026-10-28T18:00:29.939Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 01:00 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2017-20290

Discourse < 1.9.0.beta13 Reflected XSS via /email/unsubscribed

Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email parameter of /email/unsubscribed. Attackers can craft GET requests with SVG onload payloads, which unsubscribed.html.erb renders unescaped via html_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:24.711Z. Updated 2026-10-22T10:57:24.711Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2017-20289

Broadstreet Ad Widget WordPress Plugin < 2.12.0 Local File Inclusion via step parameter

Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by passing unsanitized input to require in views/modal/index.php. Attackers can supply directory traversal sequences in the 'step' parameter, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:23.974Z. Updated 2026-10-23T21:16:32.796Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:16 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2017-20288

QCubed 3.1.1 Reflected XSS via installer step_2.php

QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. Attackers can craft GET requests to /assets/php/_devtools/installer/step_2.php with malicious installation_path values echoed unescaped, exe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:23.289Z. Updated 2026-10-29T11:04:55.766Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:04 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2017-20287

Javo Spot WordPress Theme < 3.0.0 Path Traversal via admin-ajax.php fn Parameter

Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the fn parameter of the jvfrm_spot_get_json AJAX action. Attackers can send GET requests to /wp-admin/admin-ajax.php with fn set to ../../wp-config.php to retrieve databas…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:22.589Z. Updated 2026-10-28T17:59:15.933Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 00:59 WIB

Official record

MedPublished 22 Oct 2026, 17:46 WIB

CVE-2026-13411

Null condition in Playbooks import crashes the plugin

Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin instance-wide via a crafted import request containing a null condition. Mattermost Advisory ID: MMSA-2026-00709

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:46:05.465Z. Updated 2026-10-22T13:37:46.805Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 20:37 WIB

Official record

HighPublished 22 Oct 2026, 17:18 WIB

CVE-2026-111079

Goose: goose: shell history and environment leak via terminal integration

A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured Large Language Model (LLM) provider endpoints during queries. If a user enters sensitive data—such as API tokens, passwords, or environment…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:18:32.797Z. Updated 2026-10-23T15:05:47.352Z.

CVSS7.4v3.1KEVNot listedEPSSPresentUpdated23 Oct 2026, 22:05 WIB

Official record

MedPublished 22 Oct 2026, 17:16 WIB

CVE-2026-115207

Patch: filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers are accepted rather than…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:16:12.930Z. Updated 2026-10-28T02:19:22.188Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated28 Oct 2026, 09:19 WIB

Official record

HighPublished 22 Oct 2026, 17:00 WIB

CVE-2026-112313

WordPress ACF Extended plugin <= 0.9.2.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects ACF Extended: from n/a through 0.9.2.7.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:00:12.776Z. Updated 2026-10-22T10:56:12.260Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:56 WIB

Official record

HighPublished 22 Oct 2026, 17:00 WIB

CVE-2026-112820

WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:00:12.735Z. Updated 2026-10-22T10:56:12.421Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:56 WIB

Official record

MedPublished 22 Oct 2026, 16:38 WIB

CVE-2026-114348

webpack-dev-server vulnerable to information disclosure via Host validation bypass in the open-editor endpoint

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-editor endpoint validates the Host header with a regular expression meant for browser Origin schemes, so a Host value beginning with file: or w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T09:38:37.301Z. Updated 2026-10-22T13:37:46.947Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 20:37 WIB

Official record

HighPublished 22 Oct 2026, 16:31 WIB

CVE-2026-112085

webpack-dev-server vulnerable to cross-origin WebSocket access via proxied upgrades

webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to forward WebSockets, the server forwards non-HMR WebSocket upgrade requests to the proxy target without validating the Host or Origin headers, s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T09:31:59.124Z. Updated 2026-10-22T13:37:47.089Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 20:37 WIB

Official record

MedPublished 22 Oct 2026, 16:18 WIB

CVE-2026-106017

CVE-2026-106017

Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T09:18:01.956Z. Updated 2026-10-22T13:37:47.238Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 20:37 WIB

Official record

LowPublished 22 Oct 2026, 16:07 WIB

CVE-2026-21812

Multiple security vulnerabilities affect HCL AppScan Azure Boards Plugin (CVE-2026-12143 and CVE-2026-13149)

HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. This could allow an attacker to intercept credentials or authentication tokens during transmission. The plugin has been updated to display a wa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T09:07:02.600Z. Updated 2026-10-22T13:37:47.397Z.

CVSS2.2v3.1KEVNot listedEPSSPresentUpdated22 Oct 2026, 20:37 WIB

Official record