Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,629 published records · 12 KEV · 3,629 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,629 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3078.5%
High1,02528%
Med1,54142%
Low1123.1%
None10.03%
Legacy00.00%
Unscored64318%

Matching records by UTC month

Aug 253,629

Signal coverage

KEV-listed: 12
With a forecast: 3,629
Unknown date: 0
Unscored severity: 643

Share of cohort: KEV 0.33% · forecast 100% · unscored 18%.

Showing 3041–3060 of 3,629By severity band: Critical · 9.0–10.0 307, High · 7.0–8.9 1,025, Medium · 4.0–6.9 1,541, Low · 0.1–3.9 112, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 643

MedPublished 07 Aug 2025, 00:02 WIB

CVE-2025-8665

agno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injection

A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5. This issue affects the function MCPTools/MultiMCPTools in the library libs/agno/agno/tools/mcp.py of the component Model Context Protocol Handler. The manipulation of the argument command leads to os command injection. The a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T17:02:04.987Z. Updated 2025-08-06T17:31:11.272Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Aug 2025, 00:31 WIB

Official record

MedPublished 06 Aug 2025, 23:17 WIB

CVE-2025-20215

Cisco Webex Meeting Client Join Certificate Validation Vulnerability

A vulnerability in the meeting-join functionality of Cisco Webex Meetings could have allowed an unauthenticated, network-proximate attacker to complete a meeting-join process in place of an intended targeted user, provided the requisite conditions were satisfied. Cisco has addressed this vulnerability in the Cisco Webe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3041 to 3060 of 3629.First page Next page

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T16:17:21.263Z. Updated 2025-08-06T17:34:39.937Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated07 Aug 2025, 00:34 WIB

Official record

MedPublished 06 Aug 2025, 23:14 WIB

CVE-2025-20332

Cisco Identity Services Engine Authorization Bypass Vulnerability

A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of server-side validation of Administrator permissions. An attacker could exploit this vulnerability by su…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T16:14:48.654Z. Updated 2025-08-06T19:14:09.344Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated07 Aug 2025, 02:14 WIB

Official record

MedPublished 06 Aug 2025, 23:14 WIB

CVE-2025-20331

Cisco Identity Services Engine Stored Cross-Site Scripting Vulnerabiliy

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to conduct a stored XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an af…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T16:14:41.067Z. Updated 2025-08-07T14:58:17.509Z.

CVSS5.4v3.1KEVNot listedEPSSPresentUpdated07 Aug 2025, 21:58 WIB

Official record

HighPublished 06 Aug 2025, 23:02 WIB

CVE-2025-53786

Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security im…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T16:02:05.764Z. Updated 2026-02-26T17:49:52.527Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:49 WIB

Official record

UnscoredPublished 06 Aug 2025, 22:32 WIB

CVE-2024-8244

Walk/WalkDir in path/filepath susceptible to symlink race

The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links, but both functions are susceptible to a TOCTOU (time of check/time of use) race condition where a portion of the path being walked is replaced with a symbolic link while the walk is in progress.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T15:32:27.357Z. Updated 2025-11-03T19:47:26.652Z.

CVSS—KEVNot listedEPSSPresentUpdated04 Nov 2025, 02:47 WIB

Official record

MedPublished 06 Aug 2025, 22:25 WIB

CVE-2025-48394

CVE-2025-48394

An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI. This security issue has been fixed in the latest version which is available on the Eaton download center.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T15:25:41.219Z. Updated 2025-08-06T15:50:01.680Z.

CVSS4.7v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:50 WIB

Official record

MedPublished 06 Aug 2025, 22:25 WIB

CVE-2025-48393

CVE-2025-48393

The server identity check mechanism for firmware upgrade performed via command shell is insecurely implemented potentially allowing an attacker to perform a Man-in-the-middle attack. This security issue has been fixed in the latest firmware version of Eaton G4 PDU which is available on the Eaton download center.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T15:25:17.947Z. Updated 2026-02-09T05:35:45.734Z.

CVSS5.7v3.1KEVNot listedEPSSPresentUpdated09 Feb 2026, 12:35 WIB

Official record

MedPublished 06 Aug 2025, 21:45 WIB

CVE-2024-52885

Path Traversal

The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to at least one File Share application) to list the file names of 'nobody'-accessible directories on the Mobile Access gateway.

Excerpt language: en.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T14:45:43.182Z. Updated 2025-08-06T15:03:53.437Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:03 WIB

Official record

MedPublished 06 Aug 2025, 21:44 WIB

CVE-2025-2028

Lack of TLS validation

Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T14:44:31.807Z. Updated 2025-08-06T15:05:22.411Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:05 WIB

Official record

MedPublished 06 Aug 2025, 21:28 WIB

CVE-2025-36020

IBM Guardium Data Protection information disclosure

IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to cleartext transmission of sensitive credential information.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T14:28:45.780Z. Updated 2025-10-22T18:48:49.556Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated23 Oct 2025, 01:48 WIB

Official record

MedPublished 06 Aug 2025, 21:10 WIB

CVE-2025-8616

Malicious browser plugins may cause Authentication replay attack vulnerability to bypass authentication in OpenText Advanced Authentication

A weakness identified in OpenText Advanced Authentication where a Malicious browser plugin can record and replay the user authentication process to bypass Authentication. This issue affects Advanced Authentication on or before 6.5.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T14:10:25.819Z. Updated 2025-08-06T20:26:35.824Z.

CVSS6.1v4.0KEVNot listedEPSSPresentUpdated07 Aug 2025, 03:26 WIB

Official record

HighPublished 06 Aug 2025, 20:50 WIB

CVE-2025-3354

IBM Tivoli Monitoring code execution

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T13:50:06.240Z. Updated 2026-02-26T17:49:53.408Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:49 WIB

Official record

HighPublished 06 Aug 2025, 20:49 WIB

CVE-2025-3320

IBM Tivoli Monitoring code execution

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 20 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash.

Excerpt language: en.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T13:49:35.970Z. Updated 2025-08-07T03:55:20.363Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated07 Aug 2025, 10:55 WIB

Official record

MedPublished 06 Aug 2025, 19:44 WIB

CVE-2025-23335

CVE-2025-23335

NVIDIA Triton Inference Server for Windows and Linux and the Tensor RT backend contain a vulnerability where an attacker could cause an underflow by a specific model configuration and a specific input. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:44:08.526Z. Updated 2025-08-06T13:27:04.273Z.

CVSS4.4v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:27 WIB

Official record

MedPublished 06 Aug 2025, 19:43 WIB

CVE-2025-23334

CVE-2025-23334

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by sending a request. A successful exploit of this vulnerability might lead to information disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:43:24.936Z. Updated 2025-08-06T13:31:07.946Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:31 WIB

Official record

MedPublished 06 Aug 2025, 19:42 WIB

CVE-2025-23333

CVE-2025-23333

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause an out-of-bounds read by manipulating shared memory data. A successful exploit of this vulnerability might lead to information disclosure.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:42:55.792Z. Updated 2025-08-06T13:43:04.270Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:43 WIB

Official record

HighPublished 06 Aug 2025, 19:42 WIB

CVE-2025-23331

CVE-2025-23331

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where a user could cause a memory allocation with excessive size value, leading to a segmentation fault, by providing an invalid request. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:42:25.331Z. Updated 2025-08-06T13:46:57.547Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:46 WIB

Official record

HighPublished 06 Aug 2025, 19:41 WIB

CVE-2025-23327

CVE-2025-23327

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through specially crafted inputs. A successful exploit of this vulnerability might lead to denial of service and data tampering.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:41:48.803Z. Updated 2025-08-06T13:51:53.955Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 20:51 WIB

Official record

HighPublished 06 Aug 2025, 19:41 WIB

CVE-2025-23326

CVE-2025-23326

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause an integer overflow through a specially crafted input. A successful exploit of this vulnerability might lead to denial of service.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-08-06T12:41:19.641Z. Updated 2025-08-06T15:35:32.278Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated06 Aug 2025, 22:35 WIB

Official record