Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,980 published records · 19 KEV · 3,980 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,980 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2446.1%
High95724%
Med1,53639%
Low1193.0%
None00.00%
Legacy00.00%
Unscored1,12428%

Matching records by UTC month

May 253,980

Signal coverage

KEV-listed: 19
With a forecast: 3,980
Unknown date: 0
Unscored severity: 1,124

Share of cohort: KEV 0.48% · forecast 100% · unscored 28%.

Showing 401–420 of 3,980By severity band: Critical · 9.0–10.0 244, High · 7.0–8.9 957, Medium · 4.0–6.9 1,536, Low · 0.1–3.9 119, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,124

MedPublished 27 May 2025, 02:31 WIB

CVE-2025-5202

Open Asset Import Library Assimp HL1MDLLoader.cpp validate_header out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as problematic. Affected by this vulnerability is the function HL1MDLLoader::validate_header of the file assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to out-of-bounds read. An attack has to be approac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T19:31:06.228Z. Updated 2025-05-28T17:34:55.692Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 00:34 WIB

Official record

MedPublished 27 May 2025, 02:00 WIB

CVE-2025-5201

Open Asset Import Library Assimp LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 401 to 420 of 3980.First page Next page

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T19:00:09.982Z. Updated 2025-05-28T17:35:01.372Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 00:35 WIB

Official record

MedPublished 27 May 2025, 01:31 WIB

CVE-2025-5200

Open Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T18:31:06.626Z. Updated 2025-05-28T17:35:08.578Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 00:35 WIB

Official record

MedPublished 26 May 2025, 23:06 WIB

CVE-2025-23392

Reflected XSS in SystemsController.java in spacewalk-java

A Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in spacewalk-java allows execution of arbitrary Javascript code on target systems.This issue affects Container suse/manager/5.0/x86_64/server:5.0.4.7.19.1: from ? before 5.0.24-150600.3.25.1; Container suse/manager/5.0/x86_64/…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T16:06:25.847Z. Updated 2025-05-27T14:09:44.335Z.

CVSS5.6v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:09 WIB

Official record

UnscoredPublished 26 May 2025, 22:34 WIB

CVE-2025-23394

daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T15:34:32.562Z. Updated 2025-05-27T14:05:20.489Z.

CVSS—KEVNot listedEPSSPresentUpdated27 May 2025, 21:05 WIB

Official record

HighPublished 26 May 2025, 22:18 WIB

CVE-2025-23395

Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

Screen 5.0.0 when it runs with setuid-root privileges does not drop privileges while operating on a user supplied path. This allows unprivileged users to create files in arbitrary locations with `root` ownership, the invoking user's (real) group ownership and file mode 0644. All data written to the Screen PTY will be l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T15:18:46.694Z. Updated 2025-05-27T14:10:29.258Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:10 WIB

Official record

MedPublished 26 May 2025, 22:10 WIB

CVE-2025-46802

Temporary chown() of users' TTY to mode 0666 allows PTY hijacking in screen

For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T15:10:38.460Z. Updated 2025-05-27T14:11:53.805Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:11 WIB

Official record

MedPublished 26 May 2025, 22:06 WIB

CVE-2025-46803

Screen creates by default world-writable PTYs

The default mode of pseudo terminals (PTYs) allocated by Screen was changed from 0620 to 0622, thereby allowing anyone to write to any Screen PTYs in the system.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T15:06:04.339Z. Updated 2025-05-27T14:12:42.420Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:12 WIB

Official record

UnscoredPublished 26 May 2025, 21:54 WIB

CVE-2025-37992

net_sched: Flush gso_skb list too during ->change()

In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change() operation, only the main skb queue was trimmed, potentially leaving packets in the gso_skb list. This could result in NULL pointer derefe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T14:54:15.796Z. Updated 2026-05-11T21:19:12.976Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

MedPublished 26 May 2025, 21:05 WIB

CVE-2025-39498

WordPress Spotlight - Social Media Feeds (Premium) plugin <= 1.7.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Spotlight Spotlight - Social Media Feeds (Premium) allows Retrieve Embedded Sensitive Data.This issue affects Spotlight - Social Media Feeds (Premium): from n/a through 1.7.1.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T14:05:22.053Z. Updated 2026-04-28T16:12:32.978Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:12 WIB

Official record

LowPublished 26 May 2025, 20:31 WIB

CVE-2025-46804

Screen 5.0.0 and older versions allow file existence tests when installed setuid-root

A minor information leak when running Screen with setuid-root privileges allows unprivileged users to deduce information about a path that would otherwise not be available. Affected are older Screen versions, as well as version 5.0.0.

Excerpt language: en.

Severity low: primary CNA CVSS 2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T13:31:17.792Z. Updated 2025-05-28T13:48:38.991Z.

CVSS2v4.0KEVNot listedEPSSPresentUpdated28 May 2025, 20:48 WIB

Official record

HighPublished 26 May 2025, 20:31 WIB

CVE-2025-5196

Wing FTP Server Lua Admin Console unnecessary privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The complexity of an attack is ra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T13:31:05.016Z. Updated 2025-05-28T17:35:14.955Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 00:35 WIB

Official record

MedPublished 26 May 2025, 20:16 WIB

CVE-2025-46805

Screen has a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root

Screen version 5.0.0 and older version 4 releases have a TOCTOU race potentially allowing to send SIGHUP, SIGCONT to privileged processes when installed setuid-root.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T13:16:40.969Z. Updated 2025-05-27T14:10:49.034Z.

CVSS5.7v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:10 WIB

Official record

MedPublished 26 May 2025, 20:00 WIB

CVE-2025-5186

thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery

A vulnerability was found in thinkgem JeeSite up to 5.11.1. It has been rated as critical. Affected by this issue is the function ResourceLoader.getResource of the file /cms/fileTemplate/form of the component URI Scheme Handler. The manipulation of the argument Name leads to server-side request forgery. The attack may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T13:00:08.937Z. Updated 2025-05-28T17:35:22.492Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 00:35 WIB

Official record

MedPublished 26 May 2025, 19:55 WIB

CVE-2025-40663

Stored Cross-Site Scripting (XSS) in i2A-Cronos by i2A

Stored Cross-Site Scripting (XSS) vulnerability in i2A-Cronos version 23.02.01.17, from i2A. It allows an authenticated attacker to upload a malicious SVG image into the user's personal space in /CronosWeb/Modules/Persons/PersonalDocuments/PersonalDocuments. There is no reported fix at this time.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:55:30.974Z. Updated 2025-05-27T14:12:00.795Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:12 WIB

Official record

MedPublished 26 May 2025, 19:54 WIB

CVE-2025-40653

User enumeration in M3M Printer Server Web

User enumeration vulnerability in M3M Printer Server Web. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine whether a username is valid or not, allowing a brute force attack on valid usernames.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:54:08.905Z. Updated 2025-05-27T13:21:01.672Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 20:21 WIB

Official record

MedPublished 26 May 2025, 19:52 WIB

CVE-2025-40652

Cross-Site Scripting (XSS) in CoverManager

Stored Cross-Site Scripting (XSS) vulnerability in the CoverManager booking software. This allows an attacker to inject malicious scripts into the application, which are permanently stored on the server. The malicious scripts are executed in the browser of any user visiting the affected page without the user having to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:52:43.162Z. Updated 2025-05-27T14:14:35.256Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:14 WIB

Official record

HighPublished 26 May 2025, 19:51 WIB

CVE-2025-40650

Insecure Direct Object Reference (IDOR) in Clickedu

Insecure Direct Object Reference (IDOR) vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:51:32.391Z. Updated 2025-05-27T14:08:43.120Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:08 WIB

Official record

HighPublished 26 May 2025, 19:49 WIB

CVE-2025-40667

Missing authorization vulnerability in TCMAN GIM v11

Missing authorization vulnerability in TCMAN's GIM v11. This allows an authenticated attacker to access any functionality of the application even when they are not available through the user interface. To exploit the vulnerability the attacker must modify the HTTP code of the response from ‘302 Found’ to ‘200 OK’, as w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:49:49.315Z. Updated 2025-05-27T14:15:27.673Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:15 WIB

Official record

HighPublished 26 May 2025, 19:48 WIB

CVE-2025-40666

Time-based blind SQL injection vulnerability in TCMAN GIM v11

Time-based blind SQL injection vulnerabilities in TCMAN's GIM v11. These allow an attacker to retrieve, create, update and delete databases through ArbolID parameter in/GIMWeb/PC/frmPreventivosList.aspx.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-26T12:48:21.940Z. Updated 2025-05-27T14:13:29.073Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 May 2025, 21:13 WIB

Official record