Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,054 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2576.3%
High1,14328%
Med1,56539%
Low1323.3%
None10.02%
Legacy00.00%
Unscored95624%

Matching records by UTC month

Nov 244,054

Signal coverage

KEV-listed: 16
With a forecast: 4,054
Unknown date: 0
Unscored severity: 956

Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.

Showing 301–320 of 4,054By severity band: Critical · 9.0–10.0 257, High · 7.0–8.9 1,143, Medium · 4.0–6.9 1,565, Low · 0.1–3.9 132, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 956

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2024-9461

Total Upkeep <= 1.16.6 - Authenticated (Administrator+) Remote Code Execution via Backup Settings

The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.16.6 via the cron_interval parameter. This is due to missing input validation and sanitization. This makes it possible for authenticated attac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:54.220Z. Updated 2026-04-08T17:03:32.841Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:03 WIB

Official record

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2018-5852

Buffer Over-read in IPA

An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:25.527Z. Updated 2024-11-26T15:00:48.248Z.

Showing 301 to 320 of 4054.First page Next page

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:00 WIB

Official record

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2018-11816

Use After Free in Video

Crafted Binder Request Causes Heap UAF in MediaServer

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:24.297Z. Updated 2024-11-26T15:57:56.731Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:57 WIB

Official record

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2017-18307

Information Exposure in Kernel

Information disclosure possible while audio playback.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:23.036Z. Updated 2024-11-26T15:57:56.866Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:57 WIB

Official record

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2017-18306

Information Exposure in Camera Driver

Information disclosure due to uninitialized variable.

Excerpt language: en.

Severity high: primary CNA CVSS 8.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:21.839Z. Updated 2024-11-26T15:57:56.603Z.

CVSS8.4v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:57 WIB

Official record

HighPublished 26 Nov 2024, 20:56 WIB

CVE-2016-10408

Improper Access Control in Core.

QSEE will randomly experience a fatal error during execution due to speculative instruction fetches from device memory. Device memory is not valid executable memory.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:56:20.512Z. Updated 2024-11-26T15:57:56.464Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:57 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-53976

CVE-2024-53976

Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage. This vulnerability affects Firefox for iOS < 133.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:07.977Z. Updated 2024-11-26T15:28:52.539Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2024, 22:28 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-53975

CVE-2024-53975

Accessing a non-secure HTTP site that uses a non-existent port may cause the SSL padlock icon in the location URL bar to, misleadingly, appear secure. This vulnerability affects Firefox for iOS < 133.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:07.725Z. Updated 2025-10-28T14:34:17.428Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Oct 2025, 21:34 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-11699

CVE-2024-11699

Memory safety bugs present in Firefox 132, Firefox ESR 128.4, and Thunderbird 128.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:02.646Z. Updated 2025-11-03T21:52:03.576Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 04:52 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-11708

CVE-2024-11708

Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:02.250Z. Updated 2024-11-27T15:10:55.501Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Nov 2024, 22:10 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-11706

CVE-2024-11706

A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:01.638Z. Updated 2024-11-26T16:32:23.217Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Nov 2024, 23:32 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-11705

CVE-2024-11705

`NSC_DeriveKey` inadvertently assumed that the `phKey` parameter is always non-NULL. When it was passed as NULL, a segmentation fault (SEGV) occurred, leading to crashes. This behavior conflicted with the PKCS#11 v3.0 specification, which allows `phKey` to be NULL for certain mechanisms. This vulnerability affects Fire…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:01.020Z. Updated 2024-11-27T15:14:36.319Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Nov 2024, 22:14 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:34 WIB

CVE-2024-11698

CVE-2024-11698

A flaw in handling fullscreen transitions may have inadvertently caused the application to become stuck in fullscreen mode when a modal dialog was opened during the transition. This issue left users unable to exit fullscreen mode using standard actions like pressing "Esc" or accessing right-click menus, resulting in a …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:34:00.682Z. Updated 2024-11-27T15:20:24.730Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Nov 2024, 22:20 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11704

CVE-2024-11704

A double-free issue could have occurred in `sec_pkcs7_decoder_start_decrypt()` when handling an error path. Under specific conditions, the same symmetric key could have been freed twice, potentially leading to memory corruption. This vulnerability affects Firefox < 133, Thunderbird < 133, Firefox ESR < 128.7, and Thund…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:59.991Z. Updated 2025-11-03T20:36:29.923Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:36 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11697

CVE-2024-11697

When handling keypress events, an attacker may have been able to trick a user into bypassing the "Open Executable File?" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:59.551Z. Updated 2025-11-03T21:52:01.996Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 04:52 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11696

CVE-2024-11696

The application failed to account for exceptions thrown by the `loadManifestFromFile` method during add-on signature verification. This flaw, triggered by an invalid or unsupported extension manifest, could have caused runtime errors that disrupted the signature validation process. As a result, the enforcement of signa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:59.172Z. Updated 2025-11-03T21:52:00.429Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 04:52 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11703

CVE-2024-11703

On Android, Firefox may have inadvertently allowed viewing saved passwords without the required device PIN authentication. This vulnerability affects Firefox < 133.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:58.796Z. Updated 2024-12-04T14:19:10.237Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Dec 2024, 21:19 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11695

CVE-2024-11695

A crafted URL containing Arabic script and whitespace characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:58.459Z. Updated 2025-11-03T21:51:58.908Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 04:51 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11694

CVE-2024-11694

Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src` bypass and DOM-based XSS through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames masquerading as legitimate content. This vulnerability affects Firefox < 133,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:57.989Z. Updated 2025-11-03T21:51:57.429Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 04:51 WIB

Official record

UnscoredPublished 26 Nov 2024, 20:33 WIB

CVE-2024-11693

CVE-2024-11693

The executable file warning was not presented when downloading .library-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-26T13:33:57.608Z. Updated 2024-11-27T15:36:35.662Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Nov 2024, 22:36 WIB

Official record