Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,774 published records · 14 KEV · 3,774 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,774 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2967.8%
High1,13730%
Med1,44438%
Low962.5%
None00.00%
Legacy00.00%
Unscored80121%

Matching records by UTC month

Jul 253,774

Signal coverage

KEV-listed: 14
With a forecast: 3,774
Unknown date: 0
Unscored severity: 801

Share of cohort: KEV 0.37% · forecast 100% · unscored 21%.

Showing 3181–3200 of 3,774By severity band: Critical · 9.0–10.0 296, High · 7.0–8.9 1,137, Medium · 4.0–6.9 1,444, Low · 0.1–3.9 96, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 801

MedPublished 07 Jul 2025, 12:02 WIB

CVE-2025-7113

Portabilis i-Educar Curricular Components Module edit cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument Nome leads to cross site scripting. It is possible to launch …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T05:02:08.729Z. Updated 2025-07-07T17:08:27.269Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:08 WIB

Official record

MedPublished 07 Jul 2025, 11:54 WIB

CVE-2025-24508

Offline Extraction of Account Connectivity Credentials (ACCs) in IT Management Suite

Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T04:54:31.638Z. Updated 2025-07-07T17:13:00.622Z.

Showing 3181 to 3200 of 3774.First page Next page

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:13 WIB

Official record

MedPublished 07 Jul 2025, 11:52 WIB

CVE-2025-53473

CVE-2025-53473

Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulnerability is exploited, unintended requests may be sent to internal servers.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T04:52:00.334Z. Updated 2025-07-07T17:15:06.115Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:15 WIB

Official record

CritPublished 07 Jul 2025, 11:51 WIB

CVE-2025-48501

CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T04:51:39.574Z. Updated 2025-07-07T17:51:06.538Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:51 WIB

Official record

MedPublished 07 Jul 2025, 11:32 WIB

CVE-2025-7112

Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scripting

A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_funcao_det.php?cod_funcao=COD&ref_cod_instituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to cross site scr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T04:32:04.972Z. Updated 2025-07-07T17:51:35.238Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:51 WIB

Official record

MedPublished 07 Jul 2025, 11:02 WIB

CVE-2025-7111

Portabilis i-Educar Course Module educar_curso_det.php cross site scripting

A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educar_curso_det.php?cod_curso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack can be initiated rem…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T04:02:07.620Z. Updated 2025-07-08T20:35:56.678Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated09 Jul 2025, 03:35 WIB

Official record

MedPublished 07 Jul 2025, 10:32 WIB

CVE-2025-7110

Portabilis i-Educar School Module educar_escola_lst.php cross site scripting

A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educar_escola_lst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate the attack remotely. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T03:32:05.738Z. Updated 2025-07-08T20:36:56.302Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated09 Jul 2025, 03:36 WIB

Official record

MedPublished 07 Jul 2025, 10:02 WIB

CVE-2025-7109

Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scripting

A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educar_aluno_beneficio_lst.php of the component Student Benefits Registration. The manipulation of the argument Benefício leads to cross site scri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T03:02:05.460Z. Updated 2025-07-08T20:41:54.292Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated09 Jul 2025, 03:41 WIB

Official record

MedPublished 07 Jul 2025, 09:38 WIB

CVE-2025-53186

CVE-2025-53186

Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:38:07.820Z. Updated 2025-07-07T17:52:02.221Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:52 WIB

Official record

MedPublished 07 Jul 2025, 09:36 WIB

CVE-2025-53185

CVE-2025-53185

Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory Impact: Successful exploitation of this vulnerability may affect service integrity.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:36:20.739Z. Updated 2025-07-07T17:52:24.400Z.

CVSS6.6v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:52 WIB

Official record

MedPublished 07 Jul 2025, 09:35 WIB

CVE-2025-53184

CVE-2025-53184

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:35:07.235Z. Updated 2025-07-07T17:15:33.622Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:15 WIB

Official record

MedPublished 07 Jul 2025, 09:32 WIB

CVE-2025-7108

risesoft-y9 Digital-Infrastructure Y9FileController.java deleteFile path traversal

A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile of the file /Digital-Infrastructure-9.6.7/y9-digitalbase-webapp/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/contro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:32:05.272Z. Updated 2025-07-07T17:16:11.927Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:16 WIB

Official record

MedPublished 07 Jul 2025, 09:29 WIB

CVE-2025-53183

CVE-2025-53183

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:29:55.469Z. Updated 2025-07-07T17:16:44.345Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:16 WIB

Official record

MedPublished 07 Jul 2025, 09:24 WIB

CVE-2025-53182

CVE-2025-53182

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:24:35.282Z. Updated 2025-07-07T15:34:13.331Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:34 WIB

Official record

MedPublished 07 Jul 2025, 09:22 WIB

CVE-2025-53181

CVE-2025-53181

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:22:58.603Z. Updated 2025-07-07T15:34:41.272Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:34 WIB

Official record

MedPublished 07 Jul 2025, 09:20 WIB

CVE-2025-53180

CVE-2025-53180

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:20:25.769Z. Updated 2025-07-07T13:40:06.294Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated07 Jul 2025, 20:40 WIB

Official record

MedPublished 07 Jul 2025, 09:16 WIB

CVE-2025-53179

CVE-2025-53179

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:16:57.298Z. Updated 2025-07-07T15:35:10.614Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:35 WIB

Official record

MedPublished 07 Jul 2025, 09:15 WIB

CVE-2025-53178

CVE-2025-53178

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:15:58.779Z. Updated 2025-07-07T15:35:30.229Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:35 WIB

Official record

HighPublished 07 Jul 2025, 09:14 WIB

CVE-2025-7145

TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host.

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:14:34.422Z. Updated 2025-07-07T15:35:58.290Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:35 WIB

Official record

LowPublished 07 Jul 2025, 09:12 WIB

CVE-2025-53177

CVE-2025-53177

Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

Excerpt language: en.

Severity low: primary CNA CVSS 3.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-07T02:12:38.484Z. Updated 2025-07-07T17:17:33.222Z.

CVSS3.9v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 00:17 WIB

Official record