Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 16,156 published records · 20 KEV · 16,156 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

16,156 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,2247.6%
High5,34833%
Med5,51434%
Low5143.2%
None00.00%
Legacy00.00%
Unscored3,55622%

Matching records by UTC month

Oct 2616,156

Signal coverage

KEV-listed: 20
With a forecast: 16,156
Unknown date: 0
Unscored severity: 3,556

Share of cohort: KEV 0.12% · forecast 100% · unscored 22%.

Showing 3381–3400 of 16,156By severity band: Critical · 9.0–10.0 1,224, High · 7.0–8.9 5,348, Medium · 4.0–6.9 5,514, Low · 0.1–3.9 514, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 3,556

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115325

Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookup

Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. Attackers with external client permissions on one network can send PUT requests to /api/extclients/{network}/{clientid} to replace public ke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:43.846Z. Updated 2026-10-23T15:05:01.043Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 22:05 WIB

Official record

CritPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115324

mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Attackers can supply crafted memory text, metadata, or message names that reach unescaped insert() and update() string interpolation to execute …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3381 to 3400 of 16156.First page Next page

Severity critical: primary CNA CVSS 9.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:43.136Z. Updated 2026-10-29T11:23:41.895Z.

CVSS9.2v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:23 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115323

EverShop 1.2.2 before 2.2.1 Missing Authorization via Customer Address API

EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addresses. Attackers who know customer and address UUIDs can send POST, PATCH, or DELETE requests to /api/customers/:customer_id/addresses routes to add…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:42.424Z. Updated 2026-10-29T02:08:25.891Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:08 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115322

Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers

Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other projects' task runs by UID. Attackers with permission on one project can supply foreign task or task run UIDs to read execution logs, datab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:41.716Z. Updated 2026-10-22T10:57:41.716Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115321

Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment

Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other projects by supplying a foreign comment UID. Attackers with any project role, including Project Viewer, can set their own project's issue as parent…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:40.982Z. Updated 2026-10-23T15:05:29.678Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 22:05 WIB

Official record

LowPublished 22 Oct 2026, 17:57 WIB

CVE-2026-115319

fzf 0.36.0 through 0.74.5 Denial of Service via maskActionContents

fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server through quadratic string concatenation. Attackers can repeatedly send POST bodies of about 1 MB to the unauthenticated localhost port, blocking the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:40.288Z. Updated 2026-10-29T11:21:21.376Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:21 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2026-114665

Goploy 1.18.0 before 1.18.1 Symlink Following Arbitrary File Read via /deploy/fileDiff and /deploy/fileCompare

Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary files. Attackers with repository write access can commit a symlink pointing outside the project directory to read database configuration and d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:39.553Z. Updated 2026-10-29T02:07:01.607Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:07 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2025-71434

Weaver E-cology < 10.76 Unauthenticated SQL Injection via doc/out/more/list

Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with srcType=2. Attackers can inject SQL through doc_datefrom/doc_dateto fields and read results via /api/ec/dev/table/counts to extract database…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:38.815Z. Updated 2026-10-23T13:28:30.051Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated23 Oct 2026, 20:28 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2024-58396

YouDataSum CPAS Audit Management System V4 Path Traversal via downPlugs fileId

YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId parameter. Attackers can send GET requests to /cpasm4/plugInManController/downPlugs with ../ sequences in fileId to retrieve system files like /etc/…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:38.109Z. Updated 2026-10-23T21:15:23.595Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:15 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2024-58394

Retool 3.88.0 XSS via /api/imageProxy SVG Proxying

Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. Attackers can supply an attacker-hosted SVG in the url parameter, which is served from the Retool origin without a Content Security Policy,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:37.409Z. Updated 2026-10-29T11:19:55.226Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:19 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2024-58393

i-Netsolution Readymade Unilevel Ecommerce MLM SQL Injection via product-details.php

i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the 'id' parameter. Attackers can send GET requests to /product-details.php with boolean-based, stacked, or time-based SLEEP payloads in …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:36.699Z. Updated 2026-10-29T02:05:25.721Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:05 WIB

Official record

MedPublished 22 Oct 2026, 17:57 WIB

CVE-2023-54413

WPML Multilingual CMS WordPress Plugin < 4.6.1 Reflected XSS via wp-login.php wp_lang

WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted input in the wp_lang parameter. Attackers can lure users to /wp-login.php with a wp_lang value injecting an image input with an obfu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:35.997Z. Updated 2026-10-22T10:57:35.997Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2022-51025

Penta Security WAPPLES 4.0.54.1 / 5.0 / 6.0 Path Traversal via /webapi/file/transfer

Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /webapi/file/transfer. Attackers can send GET requests with type=db_backup and ../ sequences in name to read files like /etc/passwd, and a hardc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:35.298Z. Updated 2026-10-23T21:15:30.156Z.

CVSS7.1v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:15 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2022-51024

Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint

Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename values like ../appsettings.json to retrieve configuration fil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:34.599Z. Updated 2026-10-29T11:17:48.365Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:17 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2022-51023

PHPOK < 5.4.081 SQL Injection via api.php sort Parameter

PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send GET requests to /api.php?c=project&f=index with extractvalue payloads in sort to extract database information through error messages. Explo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:33.897Z. Updated 2026-10-29T02:04:37.497Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:04 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2022-51022

YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory traversal sequences in filePa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:33.205Z. Updated 2026-10-22T10:57:33.205Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2022-51021

NotificationX WordPress Plugin < 2.3.12 Unauthenticated SQL Injection via notification REST endpoint

NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supplying an array-form 'id' parameter to /wp-json/notificationx/v1/notification/{id}. Attackers can pass id[1] with crafted SQL, such as time-bas…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:32.517Z. Updated 2026-10-23T21:15:37.175Z.

CVSS8.8v4.0KEVNot listedEPSSPresentUpdated24 Oct 2026, 04:15 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2021-48017

OrbiTeam BSCW Server < 5.2.5 / 7.4.4 Path Traversal via bscw.cgi

OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. Attackers can send GET requests to /pub/bscw.cgi/<id>?op=theme with ../ sequences in style_name to read local files such as /etc/passwd. Exploitation ev…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:31.855Z. Updated 2026-10-29T11:16:33.337Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 18:16 WIB

Official record

CritPublished 22 Oct 2026, 17:57 WIB

CVE-2021-48016

DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php

DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticated attackers can send a crafted Referer to /plus/flink.php?dopost=save with an empty validate code to execute arbitrary PHP and system comman…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:31.176Z. Updated 2026-10-29T02:06:05.908Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated29 Oct 2026, 09:06 WIB

Official record

HighPublished 22 Oct 2026, 17:57 WIB

CVE-2021-48015

JeeWMS Path Traversal via showOrDownByurl.do

JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can send GET requests to /systemController/showOrDownByurl.do with ../ sequences in dbPath, which bypasses AuthInterceptor, to retrieve files lik…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-10-22T10:57:30.531Z. Updated 2026-10-22T10:57:30.531Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated22 Oct 2026, 17:57 WIB

Official record