Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,774 published records · 14 KEV · 3,774 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,774 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2967.8%
High1,13730%
Med1,44438%
Low962.5%
None00.00%
Legacy00.00%
Unscored80121%

Matching records by UTC month

Jul 253,774

Signal coverage

KEV-listed: 14
With a forecast: 3,774
Unknown date: 0
Unscored severity: 801

Share of cohort: KEV 0.37% · forecast 100% · unscored 21%.

Showing 3241–3260 of 3,774By severity band: Critical · 9.0–10.0 296, High · 7.0–8.9 1,137, Medium · 4.0–6.9 1,444, Low · 0.1–3.9 96, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 801

HighPublished 07 Jul 2025, 03:02 WIB

CVE-2025-7092

Belkin F9K1122 webs formWlanSetupWPS stack-based overflow

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /goform/formWlanSetupWPS of the component webs. The manipulation of the argument wps_enrolee_pin/webpage leads to stack-based buffer overflow. The attack can be initi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T20:02:05.250Z. Updated 2025-07-07T16:00:43.928Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:00 WIB

Official record

HighPublished 07 Jul 2025, 02:32 WIB

CVE-2025-7091

Belkin F9K1122 webs formWlanMP stack-based overflow

A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of the component webs. The manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 3241 to 3260 of 3774.First page Next page

Published 2025-07-06T19:32:05.446Z. Updated 2025-07-07T16:01:19.432Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:01 WIB

Official record

HighPublished 07 Jul 2025, 02:02 WIB

CVE-2025-7090

Belkin F9K1122 webs formConnectionSetting stack-based overflow

A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is the function formConnectionSetting of the file /goform/formConnectionSetting of the component webs. The manipulation of the argument max_Conn/timeOut leads to stack-based buffer overflow. The attack ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T19:02:06.107Z. Updated 2025-07-07T16:02:01.511Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:02 WIB

Official record

HighPublished 07 Jul 2025, 01:32 WIB

CVE-2025-7089

Belkin F9K1122 webs formWanTcpipSetup stack-based overflow

A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be initiated remotely. The expl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T18:32:04.914Z. Updated 2025-07-07T16:02:31.113Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:02 WIB

Official record

HighPublished 07 Jul 2025, 01:02 WIB

CVE-2025-7088

Belkin F9K1122 webs formPPPoESetup stack-based overflow

A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoESetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T18:02:06.558Z. Updated 2025-07-07T15:47:43.943Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:47 WIB

Official record

HighPublished 07 Jul 2025, 00:32 WIB

CVE-2025-7087

Belkin F9K1122 webs formL2TPSetup stack-based overflow

A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/formL2TPSetup of the component webs. The manipulation of the argument L2TPUserName leads to stack-based buffer overflow. The attack can be launched remotely. The e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T17:32:05.280Z. Updated 2025-07-07T15:48:38.094Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 22:48 WIB

Official record

HighPublished 07 Jul 2025, 00:02 WIB

CVE-2025-7086

Belkin F9K1122 webs formPPTPSetup stack-based overflow

A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup of the file /goform/formPPTPSetup of the component webs. The manipulation of the argument pptpUserName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T17:02:08.800Z. Updated 2025-07-07T13:51:05.989Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 20:51 WIB

Official record

HighPublished 06 Jul 2025, 23:32 WIB

CVE-2025-7085

Belkin F9K1122 webs formiNICWpsStart stack-based overflow

A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart of the component webs. The manipulation of the argument pinCode leads to stack-based buffer overflow. The attack may be initiated remotely. The exploi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T16:32:05.008Z. Updated 2025-07-07T16:03:05.839Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:03 WIB

Official record

HighPublished 06 Jul 2025, 23:02 WIB

CVE-2025-7084

Belkin F9K1122 webs formWpsStart stack-based overflow

A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. This vulnerability affects the function formWpsStart of the file /goform/formWpsStart of the component webs. The manipulation of the argument pinCode leads to stack-based buffer overflow. The attack can be initiated remotely. The exp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T16:02:05.557Z. Updated 2025-07-07T16:03:36.843Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:03 WIB

Official record

MedPublished 06 Jul 2025, 22:32 WIB

CVE-2025-7083

Belkin F9K1122 webs mp os command injection

A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. This affects the function mp of the file /goform/mp of the component webs. The manipulation of the argument command leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T15:32:05.292Z. Updated 2025-07-07T16:04:06.777Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:04 WIB

Official record

MedPublished 06 Jul 2025, 21:02 WIB

CVE-2025-7082

Belkin F9K1122 webs formBSSetSitesurvey os command injection

A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey of the component webs. The manipulation of the argument wan_ipaddr/wan_netmask/wan_gateway/wl_ssid is directly passed by the attacker/so we c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T14:02:05.329Z. Updated 2025-07-07T13:55:21.071Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 20:55 WIB

Official record

CritPublished 06 Jul 2025, 20:50 WIB

CVE-2025-5333

Unauthenticated Remote Code Execution in IT Management Suite

Remote attackers can execute arbitrary code in the context of the vulnerable service process.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T13:50:25.955Z. Updated 2025-07-07T14:02:14.408Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 21:02 WIB

Official record

MedPublished 06 Jul 2025, 20:32 WIB

CVE-2025-7081

Belkin F9K1122 webs formSetWanStatic os command injection

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument m_wan_ipaddr/m_wan_netmask/m_wan_gateway/m_wan_staticdns1/m_wan_staticdns2 is …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T13:32:04.709Z. Updated 2025-07-07T14:06:39.579Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 21:06 WIB

Official record

MedPublished 06 Jul 2025, 20:02 WIB

CVE-2025-7080

Done-0 Jank JWT Token jwt_utils.go hard-coded password

A vulnerability, which was classified as problematic, was found in Done-0 Jank up to 322caebbad10568460364b9667aa62c3080bfc17. Affected is an unknown function of the file internal/utils/jwt_utils.go of the component JWT Token Handler. The manipulation of the argument accessSecret/refreshSecret with the input jank-blog-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T13:02:05.867Z. Updated 2025-07-07T14:09:31.086Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 21:09 WIB

Official record

MedPublished 06 Jul 2025, 19:32 WIB

CVE-2025-7079

mao888 bluebell-plus JWT Token jwt.go hard-coded password

A vulnerability, which was classified as problematic, has been found in mao888 bluebell-plus up to 2.3.0. This issue affects some unknown processing of the file bluebell_backend/pkg/jwt/jwt.go of the component JWT Token Handler. The manipulation of the argument mySecret with the input bluebell-plus leads to use of hard…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T12:32:05.291Z. Updated 2025-07-07T16:20:48.263Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:20 WIB

Official record

UnscoredPublished 06 Jul 2025, 16:11 WIB

CVE-2025-38235

HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting

In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: fix "appletb_backlight" backlight device reference counting During appletb_kbd_probe, probe attempts to get the backlight device by name. When this happens backlight_device_get_by_name looks for a device in the backlight class which…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T09:11:14.930Z. Updated 2026-05-11T21:23:51.093Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:23 WIB

Official record

MedPublished 06 Jul 2025, 15:32 WIB

CVE-2025-7078

07FLYCMS/07FLY-CMS/07FlyCRM cross-site request forgery

A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is publishe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T08:32:05.396Z. Updated 2025-07-07T16:21:20.599Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:21 WIB

Official record

HighPublished 06 Jul 2025, 13:32 WIB

CVE-2025-7077

Shenzhen Libituo Technology LBT-T300-T310 appy.cgi config_3g_para buffer overflow

A vulnerability classified as critical has been found in Shenzhen Libituo Technology LBT-T300-T310 up to 2.2.3.6. This affects the function config_3g_para of the file /appy.cgi. The manipulation of the argument username_3g/password_3g leads to buffer overflow. It is possible to initiate the attack remotely. The exploit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T06:32:05.492Z. Updated 2025-07-07T16:22:06.588Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:22 WIB

Official record

UnscoredPublished 06 Jul 2025, 13:05 WIB

CVE-2025-27446

Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges

Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner). Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges. This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0. Users are recommended to upgr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T06:05:15.144Z. Updated 2026-02-26T18:27:55.996Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

MedPublished 06 Jul 2025, 07:02 WIB

CVE-2025-7076

BlackVue Dashcam 590X Configuration upload.cgi access control

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access controls. The attack needs to be initiated within the local net…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-07-06T00:02:04.767Z. Updated 2025-07-07T16:05:38.975Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Jul 2025, 23:05 WIB

Official record