Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 3301–3320 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

MedPublished 05 Jun 2025, 05:00 WIB

CVE-2025-5615

PHPGurukul Online Fire Reporting System details.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /details.php. The manipulation of the argument requestid leads to sql injection. The attack can be launched remotely. The exploit has been di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T22:00:17.547Z. Updated 2025-06-05T18:00:17.399Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated06 Jun 2025, 01:00 WIB

Official record

MedPublished 05 Jun 2025, 05:00 WIB

CVE-2025-5614

PHPGurukul Online Fire Reporting System search-report-result.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3301 to 3320 of 3682.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T22:00:14.479Z. Updated 2025-06-05T18:08:47.598Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated06 Jun 2025, 01:08 WIB

Official record

MedPublished 05 Jun 2025, 04:34 WIB

CVE-2025-5690

Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg_dump. This problem occurs only when dynamic masking is enabled, which is not the default setting. The probl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T21:34:47.358Z. Updated 2025-06-05T18:10:03.492Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated06 Jun 2025, 01:10 WIB

Official record

MedPublished 05 Jun 2025, 04:31 WIB

CVE-2025-5613

PHPGurukul Online Fire Reporting System request-details.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /request-details.php. The manipulation of the argument requestid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T21:31:06.181Z. Updated 2025-06-05T13:16:50.172Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 20:16 WIB

Official record

MedPublished 05 Jun 2025, 04:00 WIB

CVE-2025-5612

PHPGurukul Online Fire Reporting System reporting.php sql injection

A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /reporting.php. The manipulation of the argument fullname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T21:00:18.608Z. Updated 2025-06-05T13:17:21.271Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 20:17 WIB

Official record

MedPublished 05 Jun 2025, 03:31 WIB

CVE-2025-5611

CodeAstro Real Estate Management System submitpropertyupdate.php sql injection

A vulnerability, which was classified as critical, was found in CodeAstro Real Estate Management System 1.0. This affects an unknown part of the file /submitpropertyupdate.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:31:07.908Z. Updated 2025-06-04T20:50:55.716Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:50 WIB

Official record

MedPublished 05 Jun 2025, 03:31 WIB

CVE-2025-5610

CodeAstro Real Estate Management System submitpropertydelete.php sql injection

A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:31:05.994Z. Updated 2025-06-04T20:50:29.862Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:50 WIB

Official record

HighPublished 05 Jun 2025, 03:14 WIB

CVE-2025-48947

NextJS-Auth0 SDK Vulnerable to CDN Caching of Session Cookies

The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications. In Auth0 Next.js SDK versions 4.0.1 through 4.6.0, `__session` cookies set by auth0.middleware may be cached by CDNs due to missing Cache-Control headers. Three preconditions must be met in order for someone to be affected …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:14:44.369Z. Updated 2025-06-04T20:50:02.568Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:50 WIB

Official record

HighPublished 05 Jun 2025, 03:09 WIB

CVE-2025-46341

Privilege escalation via SSRF when using HTTP auth

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, when the server is using HTTP auth via reverse proxy, it's possible to impersonate any user either via the `Remote-User` header or the `X-WebAuth-User` header by making specially crafted requests via the add feed functionality and obtaining the CSR…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:09:18.479Z. Updated 2025-06-04T20:49:32.880Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:49 WIB

Official record

MedPublished 05 Jun 2025, 03:04 WIB

CVE-2025-46339

FreshRSS vulnerable to favicon cache poisoning via proxy

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to poison feed favicons by adding a given URL as a feed with the proxy set to an attacker-controlled one and disabled SSL verifying. The favicon hash is computed by hashing the feed URL and the salt, whilst not including the following…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:04:54.504Z. Updated 2025-06-04T20:48:49.550Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:48 WIB

Official record

HighPublished 05 Jun 2025, 03:00 WIB

CVE-2025-5609

Tenda AC18 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:00:25.562Z. Updated 2025-06-04T20:48:15.384Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:48 WIB

Official record

HighPublished 05 Jun 2025, 03:00 WIB

CVE-2025-5608

Tenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T20:00:21.750Z. Updated 2025-06-04T20:47:43.871Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:47 WIB

Official record

MedPublished 05 Jun 2025, 02:59 WIB

CVE-2025-32015

FreshRSS vulnerable to Cross-site Scripting by embedding <script> tag inside <iframe srcdoc>

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, HTML is sanitized improperly inside the `<iframe srcdoc>` attribute, which leads to cross-site scripting (XSS) by loading an attacker's UserJS inside `<script src>`. In order to execute the attack, the attacker needs to control one of the victim's …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:59:39.615Z. Updated 2025-06-04T20:47:07.131Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:47 WIB

Official record

MedPublished 05 Jun 2025, 02:50 WIB

CVE-2025-31482

FreshRSS vulnerable to DoS by malicious feed entry loading logout URL

FreshRSS is a self-hosted RSS feed aggregator. A vulnerability in versions prior to 1.26.2 causes a user to be repeatedly logged out after fetching a malicious feed entry, effectively causing that user to suffer denial of service. Version 1.26.2 contains a patch for the issue.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:50:58.615Z. Updated 2025-06-04T20:46:27.779Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:46 WIB

Official record

MedPublished 05 Jun 2025, 02:42 WIB

CVE-2025-31136

FreshRSS vulnerable to Cross-site Scripting by <iframe>'ing a vulnerable same-origin page in a feed entry

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, it's possible to run arbitrary JavaScript on the feeds page. This occurs by combining a cross-site scripting (XSS) issue that occurs in `f.php` when SVG favicons are downloaded from an attacker-controlled feed containing `<script>` tags inside of t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:42:15.077Z. Updated 2025-06-04T20:18:02.553Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:18 WIB

Official record

MedPublished 05 Jun 2025, 02:35 WIB

CVE-2025-31134

FreshRSS vulnerable to directory enumeration via ext.php

FreshRSS is a self-hosted RSS feed aggregator. Prior to version 1.26.2, an attacker can gain additional information about the server by checking if certain directories exist. An attacker can, for example, check if older PHP versions are installed or if certain software is installed on the server and potentially use tha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:35:55.749Z. Updated 2025-06-04T20:07:03.452Z.

CVSS5.5v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:07 WIB

Official record

MedPublished 05 Jun 2025, 02:32 WIB

CVE-2025-22245

CVE-2025-22245

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:32:42.328Z. Updated 2025-06-04T20:05:24.144Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:05 WIB

Official record

MedPublished 05 Jun 2025, 02:32 WIB

CVE-2025-22244

CVE-2025-22244

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:32:17.006Z. Updated 2025-06-04T20:04:30.570Z.

CVSS6.9v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:04 WIB

Official record

HighPublished 05 Jun 2025, 02:31 WIB

CVE-2025-22243

CVE-2025-22243

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:31:36.548Z. Updated 2025-06-04T20:04:02.081Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:04 WIB

Official record

MedPublished 05 Jun 2025, 02:31 WIB

CVE-2025-48935

Deno has --allow-read / --allow-write permission bypass in `node:sqlite`

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Starting in version 2.2.0 and prior to versions 2.2.5, it is possible to bypass Deno's permission read/write db permission check by using `ATTACH DATABASE` statement. Version 2.2.5 contains a patch for the issue.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-04T19:31:26.840Z. Updated 2025-06-04T20:41:22.848Z.

CVSS5.5v4.0KEVNot listedEPSSPresentUpdated05 Jun 2025, 03:41 WIB

Official record