Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,273 published records · 17 KEV · 4,273 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,273 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2375.5%
High1,05525%
Med1,75941%
Low751.8%
None20.05%
Legacy00.00%
Unscored1,14527%

Matching records by UTC month

Jan 254,273

Signal coverage

KEV-listed: 17
With a forecast: 4,273
Unknown date: 0
Unscored severity: 1,145

Share of cohort: KEV 0.40% · forecast 100% · unscored 27%.

Showing 3841–3860 of 4,273By severity band: Critical · 9.0–10.0 237, High · 7.0–8.9 1,055, Medium · 4.0–6.9 1,759, Low · 0.1–3.9 75, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 1,145

HighPublished 06 Jan 2025, 22:38 WIB

CVE-2025-21611

tgstation-server's role authorization incorrectly OR'd with user's enabled status

tgstation-server is a production scale tool for BYOND server management. Prior to 6.12.3, roles used to authorize API methods were incorrectly OR'd instead of AND'ed with the role used to determine if a user was enabled. This allows enabled users access to most, but not all, authorized actions regardless of their permi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T15:38:20.174Z. Updated 2025-01-06T16:49:47.461Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 23:49 WIB

Official record

MedPublished 06 Jan 2025, 22:34 WIB

CVE-2025-21604

LangChain4j-AIDeepin Using MD5 to Hash files may cause file upload conflicts

LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 3841 to 3860 of 4273.First page Next page

Published 2025-01-06T15:34:54.794Z. Updated 2025-01-06T16:51:12.757Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated06 Jan 2025, 23:51 WIB

Official record

UnscoredPublished 06 Jan 2025, 21:33 WIB

CVE-2024-8474

CVE-2024-8474

OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T14:33:26.129Z. Updated 2025-01-06T16:54:38.487Z.

CVSS—KEVNot listedEPSSPresentUpdated06 Jan 2025, 23:54 WIB

Official record

UnscoredPublished 06 Jan 2025, 20:52 WIB

CVE-2024-5594

CVE-2024-5594

OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T13:52:20.272Z. Updated 2025-11-03T20:48:53.705Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:48 WIB

Official record

LowPublished 06 Jan 2025, 18:19 WIB

CVE-2024-12970

OS Command Injection in TUBITAK BILGEM's Pardus OS My Computer

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TUBITAK BILGEM Pardus OS My Computer allows OS Command Injection. This issue affects Pardus OS My Computer: before 0.7.2.

Excerpt language: en.

Severity low: primary CNA CVSS 3.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T11:19:17.529Z. Updated 2026-06-01T12:47:51.341Z.

CVSS3.9v3.1KEVNot listedEPSSPresentUpdated01 Jun 2026, 19:47 WIB

Official record

MedPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45559

Buffer Over-read in Automotive OS Platform

Transient DOS can occur when GVM sends a specific message type to the Vdev-FastRPC backend.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:33.201Z. Updated 2025-02-28T06:09:08.161Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated28 Feb 2025, 13:09 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45558

Buffer Over-read in WLAN Host Cmn

Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:31.971Z. Updated 2025-01-06T14:18:34.320Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45555

Integer Overflow to Buffer Overflow in Automotive OS Platform

Memory corruption can occur if an already verified IFS2 image is overwritten, bypassing boot verification. This allows unauthorized programs to be injected into security-sensitive images, enabling the booting of a tampered IFS2 system image.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:30.879Z. Updated 2025-02-28T06:09:05.191Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated28 Feb 2025, 13:09 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45553

Use After Free in DSP Services

Memory corruption can occur when process-specific maps are added to the global list. If a map is removed from the global list while another thread is using it for a process-specific task, issues may arise.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:29.773Z. Updated 2026-02-26T19:09:32.017Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 02:09 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45550

Improper Validation of Array Index in DSP Services

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:28.599Z. Updated 2025-01-06T14:18:34.673Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45548

Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:27.476Z. Updated 2025-01-06T14:18:34.868Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45547

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:26.354Z. Updated 2025-01-06T14:18:34.993Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45546

Buffer Over-read in WLAN Windows Host

Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:25.262Z. Updated 2025-01-06T14:18:35.175Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45542

Stack-based Buffer Overflow in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:24.141Z. Updated 2025-01-06T14:18:35.300Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-45541

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host

Memory corruption when IOCTL call is invoked from user-space to read board data.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:22.981Z. Updated 2025-01-06T14:18:35.413Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

HighPublished 06 Jan 2025, 17:33 WIB

CVE-2024-43064

Permissions, Privileges, and Access Controls issue in Automotive OS Platform

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:21.864Z. Updated 2025-02-28T06:09:02.181Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated28 Feb 2025, 13:09 WIB

Official record

MedPublished 06 Jan 2025, 17:33 WIB

CVE-2024-43063

Buffer Over-read in Automotive Autonomy

information disclosure while invoking the mailbox read API.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:20.733Z. Updated 2025-01-06T14:18:35.659Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

MedPublished 06 Jan 2025, 17:33 WIB

CVE-2024-33067

Buffer Over-read in Audio

Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:19.592Z. Updated 2025-01-06T14:18:35.773Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

MedPublished 06 Jan 2025, 17:33 WIB

CVE-2024-33061

Buffer Over-read in DSP Service

Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:18.402Z. Updated 2025-01-06T14:18:35.884Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record

MedPublished 06 Jan 2025, 17:33 WIB

CVE-2024-33059

Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-01-06T10:33:17.264Z. Updated 2025-01-06T14:18:36.032Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated06 Jan 2025, 21:18 WIB

Official record