Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 361–380 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64062

CVE-2025-64062

The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value (e.g., otheruser@user.com), an attacker can assume the session and gain full access to the ta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-26T14:33:07.025Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:33 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64063

CVE-2025-64063

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate data outside their assi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 361 to 380 of 3020.First page Next page

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-26T16:50:38.299Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 23:50 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64064

CVE-2025-64064

Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP_SECURITY_PROFILE_ID=2 inside…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-25T20:35:12.049Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 03:35 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64065

CVE-2025-64065

The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vulnerable to a access control failure. This flaw allows any authenticated low-privileged user to execute a direct PATCH request, enabling them…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-26T14:35:03.860Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 21:35 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64066

CVE-2025-64066

Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to implement any authorization checks, allowing unauthenticated attackers to perform POST requests to register new user accounts in the application's local database. This bypasses the int…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-25T20:41:05.937Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 03:41 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-64067

CVE-2025-64067

Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement sufficient server-side validation to confirm that the requesting user is authorized to access the requested object or dataset. This vulnerability can be exploited …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-25T20:11:39.649Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 03:11 WIB

Official record

UnscoredPublished 25 Nov 2025, 07:00 WIB

CVE-2025-65647

CVE-2025-65647

Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-25T00:00:00.000Z. Updated 2025-11-25T19:56:55.929Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2025, 02:56 WIB

Official record

HighPublished 25 Nov 2025, 06:56 WIB

CVE-2025-62155

QuantumNous New API Has SSRF Bypass

New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system. Prior to version 0.9.6, a recently patched SSRF vulnerability contains a bypass method that can bypass the existing security fix and still allow SSRF to occur. Because the existing fix only applies security restrict…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T23:56:52.293Z. Updated 2025-11-25T19:30:37.839Z.

CVSS8.5v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 02:30 WIB

Official record

HighPublished 25 Nov 2025, 06:50 WIB

CVE-2025-65018

LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read`

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNG…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T23:50:18.294Z. Updated 2025-11-25T19:29:33.633Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 02:29 WIB

Official record

HighPublished 25 Nov 2025, 06:45 WIB

CVE-2025-64720

LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect palette premultiplication

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, an out-of-bounds read vulnerability exists in png_image_read_composite when processing palette images with PNG_FLAG_OPTIMIZE_ALPHA enabled. The…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T23:45:38.315Z. Updated 2025-11-25T19:28:20.336Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 02:28 WIB

Official record

MedPublished 25 Nov 2025, 06:41 WIB

CVE-2025-64506

LIBPNG is vulnerable to a heap buffer over-read in `png_write_image_8bit` with grayscale+alpha or RGB/RGBA images

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified writ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T23:41:09.207Z. Updated 2025-11-25T19:27:04.161Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 02:27 WIB

Official record

MedPublished 25 Nov 2025, 06:38 WIB

CVE-2025-64505

LIBPNG is vulnerable to a heap buffer overflow in `png_do_quantize` via malformed palette index

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerabili…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T23:38:40.405Z. Updated 2025-11-25T18:55:50.619Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated26 Nov 2025, 01:55 WIB

Official record

MedPublished 25 Nov 2025, 05:28 WIB

CVE-2025-10144

Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection

The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the `brands` attribute of the `products` shortcode in all versions up to, and including, 3.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T22:28:24.500Z. Updated 2026-04-08T17:33:07.951Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:33 WIB

Official record

MedPublished 25 Nov 2025, 04:03 WIB

CVE-2025-29933

CVE-2025-29933

Improper input validation within AMD uProf can allow a local attacker to write out of bounds, potentially resulting in a crash or denial of service

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T21:03:48.656Z. Updated 2025-11-24T21:17:12.832Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 04:17 WIB

Official record

MedPublished 25 Nov 2025, 04:00 WIB

CVE-2025-48511

CVE-2025-48511

Improper input validation within AMD uprof can allow a local attacker to write to an arbitrary physical address, potentially resulting in crash or denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T21:00:32.010Z. Updated 2025-11-24T21:13:33.411Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 04:13 WIB

Official record

HighPublished 25 Nov 2025, 03:56 WIB

CVE-2025-48510

CVE-2025-48510

Improper return value within AMD uProf can allow a local attacker to bypass KSLR, potentially resulting in loss of confidentiality or availability.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T20:56:39.348Z. Updated 2025-11-24T21:07:15.170Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 04:07 WIB

Official record

HighPublished 25 Nov 2025, 03:38 WIB

CVE-2025-52538

CVE-2025-52538

Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in loss of confidentiality or availability.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T20:38:06.450Z. Updated 2025-11-24T20:53:39.846Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 03:53 WIB

Official record

HighPublished 25 Nov 2025, 03:36 WIB

CVE-2025-0003

CVE-2025-0003

Inadequate lock protection within Xilinx Run time may allow a local attacker to trigger a Use-After-Free condition potentially resulting in loss of confidentiality or availability

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T20:36:37.989Z. Updated 2025-11-24T20:55:03.445Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 03:55 WIB

Official record

MedPublished 25 Nov 2025, 03:35 WIB

CVE-2025-0007

CVE-2025-0007

Insufficient validation within Xilinx Run Time framework could allow a local attacker to escalate privileges from user space to kernel space, potentially compromising confidentiality, integrity, and/or availability.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T20:35:18.474Z. Updated 2025-11-24T20:56:23.146Z.

CVSS5.7v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 03:56 WIB

Official record

CritPublished 25 Nov 2025, 03:31 WIB

CVE-2023-7330

Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of file type, path, or ext…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-24T20:31:19.914Z. Updated 2025-11-25T13:04:06.622Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 20:04 WIB

Official record