Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 3181–3200 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

MedPublished 06 Jun 2025, 11:00 WIB

CVE-2025-5721

SourceCodester Student Result Management System Profile Setting Page update_profile cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/update_profile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possible to initiate the atta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T04:00:17.054Z. Updated 2025-06-09T13:37:20.724Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:37 WIB

Official record

MedPublished 06 Jun 2025, 10:41 WIB

CVE-2025-5733

Modern Events Calendar <= 7.21.9 - Information Exposure

The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9. This is due improper or insufficient validation of the id property when exporting calendars. This makes it possible for unauthenticated attackers to retrieve the full path of the web …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3181 to 3200 of 3682.First page Next page

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:41:23.431Z. Updated 2026-04-08T17:29:47.838Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:29 WIB

Official record

MedPublished 06 Jun 2025, 10:40 WIB

CVE-2025-5719

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:40:33.310Z. Updated 2025-06-09T13:37:49.781Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:37 WIB

Official record

MedPublished 06 Jun 2025, 10:31 WIB

CVE-2025-5716

SourceCodester Open Source Clinic Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:31:06.026Z. Updated 2025-06-09T13:41:44.350Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:41 WIB

Official record

MedPublished 06 Jun 2025, 10:24 WIB

CVE-2024-46941

SystemUI component protection settings vulnerability

SystemUI has an incorrect component protection setting, which allows access to specific information.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:24:32.260Z. Updated 2025-06-09T13:42:08.225Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:42 WIB

Official record

LowPublished 06 Jun 2025, 10:00 WIB

CVE-2025-5715

Signal App Biometric Authentication missing critical step in authentication

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the physical device. The co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:00:20.411Z. Updated 2025-06-09T13:48:12.498Z.

CVSS1v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:48 WIB

Official record

MedPublished 06 Jun 2025, 10:00 WIB

CVE-2025-5714

SoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250516. It has been classified as problematic. This affects an unknown part of the file /sys/up.upload.php of the component Profile Information Update. The manipulation of the argument nomeArquivo leads to path traversal. It is possible to initiate the atta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T03:00:17.750Z. Updated 2025-06-09T13:38:37.319Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:38 WIB

Official record

MedPublished 06 Jun 2025, 09:31 WIB

CVE-2025-5713

SoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scripting

A vulnerability was found in SoluçõesCoop iSoluçõesWEB up to 20250519 and classified as problematic. Affected by this issue is some unknown functionality of the file /fluxos-dashboard of the component Flow Handler. The manipulation of the argument Descrição da solicitação leads to cross site scripting. The attack may b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T02:31:09.851Z. Updated 2025-06-09T13:39:05.961Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:39 WIB

Official record

MedPublished 06 Jun 2025, 09:31 WIB

CVE-2025-5712

SourceCodester Open Source Clinic Management System appointment.php sql injection

A vulnerability has been found in SourceCodester Open Source Clinic Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /appointment.php. The manipulation of the argument patient leads to sql injection. The attack can be launched remotely. The exploit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T02:31:07.348Z. Updated 2025-06-09T13:39:37.173Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:39 WIB

Official record

MedPublished 06 Jun 2025, 09:00 WIB

CVE-2025-5711

code-projects Real Estate Property Management System InsertCity.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/InsertCity.php. The manipulation of the argument cmbState leads to sql injection. It is possible to launch the attack remotely. The exploit has bee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T02:00:16.523Z. Updated 2025-06-09T13:40:18.563Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:40 WIB

Official record

MedPublished 06 Jun 2025, 08:31 WIB

CVE-2025-5710

code-projects Real Estate Property Management System InsertState.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/InsertState.php. The manipulation of the argument txtStateName leads to sql injection. The attack may be initiated remotely. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:31:08.347Z. Updated 2025-06-09T13:51:58.015Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 20:51 WIB

Official record

MedPublished 06 Jun 2025, 08:31 WIB

CVE-2025-5709

code-projects Real Estate Property Management System InsertCategory.php sql injection

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. This vulnerability affects unknown code of the file /Admin/InsertCategory.php. The manipulation of the argument txtCategoryName leads to sql injection. The attack can be initiated remotely. The exploit has been…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:31:06.575Z. Updated 2025-06-09T14:09:30.960Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 21:09 WIB

Official record

MedPublished 06 Jun 2025, 08:28 WIB

CVE-2024-56343

IBM Verify Identity Access Digital Credentials denial of service

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:28:38.990Z. Updated 2025-08-24T11:58:26.286Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated24 Aug 2025, 18:58 WIB

Official record

MedPublished 06 Jun 2025, 08:27 WIB

CVE-2024-56342

IBM Verify Identity Access Digital Credentials information disclosure

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:27:08.207Z. Updated 2025-08-24T11:58:08.961Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated24 Aug 2025, 18:58 WIB

Official record

MedPublished 06 Jun 2025, 08:08 WIB

CVE-2024-22330

IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:08:52.194Z. Updated 2025-08-24T11:58:59.780Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated24 Aug 2025, 18:58 WIB

Official record

MedPublished 06 Jun 2025, 08:00 WIB

CVE-2025-5708

code-projects Real Estate Property Management System NewsReport.php sql injection

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /Admin/NewsReport.php. The manipulation of the argument txtFrom leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T01:00:21.501Z. Updated 2025-06-09T14:43:07.765Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 21:43 WIB

Official record

MedPublished 06 Jun 2025, 07:31 WIB

CVE-2025-5707

PHPGurukul Human Metapneumovirus Testing Management System registered-user-testing.php sql injection

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of the argument testtype leads to sql injection. The attack may be launched remotely…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T00:31:07.174Z. Updated 2025-06-09T14:43:36.756Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 21:43 WIB

Official record

MedPublished 06 Jun 2025, 07:00 WIB

CVE-2025-5706

PHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php sql injection

A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /new-user-testing.php. The manipulation of the argument state leads to sql injection. The attack can be launched remotely.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T00:00:19.058Z. Updated 2025-06-09T14:44:05.542Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 21:44 WIB

Official record

MedPublished 06 Jun 2025, 07:00 WIB

CVE-2025-49599

CVE-2025-49599

Huawei EG8141A5 devices through V5R019C00S100, EG8145V5 devices through V5R019C00S100, and EG8145V5-V2 devices through V5R021C00S184 allow the Epuser account to disable ONT firewall functionality, e.g., to remove the default blocking of the SSH and TELNET TCP ports, aka HWNO-56Q3.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-06T00:00:00.000Z. Updated 2025-06-09T15:17:51.874Z.

CVSS4.1v3.1KEVNot listedEPSSPresentUpdated09 Jun 2025, 22:17 WIB

Official record

MedPublished 06 Jun 2025, 06:31 WIB

CVE-2025-5705

code-projects Real Estate Property Management System Property.php sql injection

A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /Admin/Property.php. The manipulation of the argument cmbCat leads to sql injection. It is possible to launch the attack remotely. The exploit has been d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-05T23:31:05.096Z. Updated 2025-06-09T14:44:32.387Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated09 Jun 2025, 21:44 WIB

Official record