Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 4901–4920 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

MedPublished 06 Apr 2026, 07:00 WIB

CVE-2026-5606

PHPGurukul Online Shopping Portal Project Parameter order-details.php sql injection

A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1. The affected element is an unknown function of the file /order-details.php of the component Parameter Handler. The manipulation of the argument orderid results in sql injection. It is possible to launch the attack remotely.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:20.975Z. Updated 2026-04-07T02:57:40.081Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 09:57 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-54324

CVE-2025-54324

An issue was discovered in NAS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect Handling of a DL NAS Transport packet leads to a Denial of Service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 4901 to 4920 of 5813.First page Next page

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-07T13:59:11.244Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 20:59 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-54328

CVE-2025-54328

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. A Stack-based Buffer Overflow occurs while parsing SMS RP-DATA messages.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T20:04:55.456Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 03:04 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-54601

CVE-2025-54601

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor amd Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a double free. An attacker can trigger a race condition by invoking an ioctl function concurre…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-07T14:02:40.432Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:02 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-54602

CVE-2025-54602

An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Improper synchronization on a global variable leads to a use-after-free. An attacker can trigger a race condition by invoking an ioctl function concu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:52:21.651Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:52 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-57834

CVE-2025-57834

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1680, 9110, W920, W930, W1000, Modem 5123, Modem 5300, Modem 5400, and Modem 5410). The absence of proper input validation leads to a Denial of Service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:57:18.896Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:57 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-57835

CVE-2025-57835

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory access, causing a syste…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-07T13:53:45.415Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 20:53 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-58349

CVE-2025-58349

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Incorrect handling of LTE MAC packets containing many MAC Control Elements (CEs) lea…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-07T14:00:23.457Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:00 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-59440

CVE-2025-59440

An issue was discovered in USIM in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper handling of SIM card proactive commands leads to a Denial of Service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-07T13:55:03.583Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 20:55 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2025-61166

CVE-2025-61166

An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:31:38.527Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:31 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-30078

CVE-2026-30078

OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type. For example when the message specification requires InitiatingMessage but sent with successfulOutcome.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T14:09:30.380Z.

CVSS—KEVNot listedEPSSPresentUpdated06 Apr 2026, 21:09 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-30613

CVE-2026-30613

An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from the serial console with…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-07-05T01:33:01.069Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:33 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31053

CVE-2026-31053

A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:42:43.611Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:42 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31058

CVE-2026-31058

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the timeRangeName parameter of the formConfigDnsFilterGlobal function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:44:56.292Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:44 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31059

CVE-2026-31059

A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attackers to execute arbitrary commands via a crafted string.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-09T20:28:11.231Z.

CVSS—KEVNot listedEPSSPresentUpdated10 Apr 2026, 03:28 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31060

CVE-2026-31060

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the notes parameter of the formGroupConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:50:08.822Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:50 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31061

CVE-2026-31061

UTT Aggressive HiPER 810G v3v1.7.7-171114 was discovered to contain a buffer overflow in the timestart parameter of the ConfigAdvideo function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:50:51.659Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:50 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31062

CVE-2026-31062

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the filename parameter of the formFtpServerDirConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:51:52.375Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:51 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31063

CVE-2026-31063

UTT Aggressive HiPER 1200GW v2.5.3-170306 was discovered to contain a buffer overflow in the pools parameter of the formArpBindConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:53:14.500Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:53 WIB

Official record

UnscoredPublished 06 Apr 2026, 07:00 WIB

CVE-2026-31065

CVE-2026-31065

UTT Aggressive 520W v3v1.7.7-180627 was discovered to contain a buffer overflow in the addCommand parameter of the formConfigCliForEngineerOnly function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-06T00:00:00.000Z. Updated 2026-04-06T19:53:59.553Z.

CVSS—KEVNot listedEPSSPresentUpdated07 Apr 2026, 02:53 WIB

Official record