Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,980 published records · 19 KEV · 3,980 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,980 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2446.1%
High95724%
Med1,53639%
Low1193.0%
None00.00%
Legacy00.00%
Unscored1,12428%

Matching records by UTC month

May 253,980

Signal coverage

KEV-listed: 19
With a forecast: 3,980
Unknown date: 0
Unscored severity: 1,124

Share of cohort: KEV 0.48% · forecast 100% · unscored 28%.

Showing 41–60 of 3,980By severity band: Critical · 9.0–10.0 244, High · 7.0–8.9 957, Medium · 4.0–6.9 1,536, Low · 0.1–3.9 119, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,124

MedPublished 31 May 2025, 03:00 WIB

CVE-2025-5361

Campcodes Online Hospital Management System contact.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Hospital Management System 1.0. This issue affects some unknown processing of the file /contact.php. The manipulation of the argument fullname leads to sql injection. The attack may be initiated remotely. The exploit has been disclose…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T20:00:10.316Z. Updated 2025-05-30T20:46:56.433Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:46 WIB

Official record

HighPublished 31 May 2025, 02:43 WIB

CVE-2025-48882

PHPOffice Math allows XXE when processing an XML file in the MathML format

PHPOffice Math is a library that provides a set of classes to manipulate different formula file formats. Prior to version 0.3.0, loading XML data using the standard `libxml` extension and the `LIBXML_DTDLOAD` flag without additional filtration, leads to XXE. Version 0.3.0 fixes the vulnerability.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 41 to 60 of 3980.First page Next page

Published 2025-05-30T19:43:35.441Z. Updated 2025-05-30T20:46:17.339Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:46 WIB

Official record

HighPublished 31 May 2025, 02:40 WIB

CVE-2025-48949

Navidrome allows SQL Injection via role parameter

Navidrome is an open source web-based music collection server and streamer. Versions 0.55.0 through 0.55.2 have a vulnerability due to improper input validation on the `role` parameter within the API endpoint `/api/artist`. Attackers can exploit this flaw to inject arbitrary SQL queries, potentially gaining unauthorize…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:40:51.355Z. Updated 2025-05-30T20:45:32.298Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:45 WIB

Official record

MedPublished 31 May 2025, 02:31 WIB

CVE-2025-5360

Campcodes Online Hospital Management System book-appointment.php sql injection

A vulnerability classified as critical was found in Campcodes Online Hospital Management System 1.0. This vulnerability affects unknown code of the file /book-appointment.php. The manipulation of the argument doctor leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:31:05.566Z. Updated 2025-05-30T20:44:58.532Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:44 WIB

Official record

HighPublished 31 May 2025, 02:25 WIB

CVE-2025-48948

Navidrome Transcoding Permission Bypass Vulnerability Report

Navidrome is an open source web-based music collection server and streamer. A permission verification flaw in versions prior to 0.56.0 allows any authenticated regular user to bypass authorization checks and perform administrator-only transcoding configuration operations, including creating, modifying, and deleting tra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:25:41.422Z. Updated 2025-05-30T20:44:14.912Z.

CVSS7.4v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:44 WIB

Official record

LowPublished 31 May 2025, 02:21 WIB

CVE-2025-48946

liboqs affected by theoretical design flaw in HQC

liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms. liboqs prior to version 0.13.0 supports the HQC algorithm, an algorithm with a theoretical design flaw which leads to large numbers of malformed ciphertexts sharing the same implicit rejection value. Curr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:21:14.847Z. Updated 2025-05-30T20:43:37.178Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated31 May 2025, 03:43 WIB

Official record

MedPublished 31 May 2025, 02:14 WIB

CVE-2025-2503

CVE-2025-2503

An improper permission handling vulnerability was reported in Lenovo PC Manager that could allow a local attacker to perform arbitrary file deletions as an elevated user.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:14:37.321Z. Updated 2025-08-21T15:33:31.394Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Aug 2025, 22:33 WIB

Official record

HighPublished 31 May 2025, 02:14 WIB

CVE-2025-2502

CVE-2025-2502

An improper default permissions vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:14:24.858Z. Updated 2026-02-26T18:27:49.570Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

HighPublished 31 May 2025, 02:14 WIB

CVE-2025-2501

CVE-2025-2501

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.

Excerpt language: en.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:14:14.040Z. Updated 2026-02-26T18:27:50.105Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

MedPublished 31 May 2025, 02:13 WIB

CVE-2025-1479

CVE-2025-1479

An open debug interface was reported in the Legion Space software included on certain Legion devices that could allow a local attacker to execute arbitrary code.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T19:13:47.411Z. Updated 2026-02-26T18:27:50.445Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

MedPublished 31 May 2025, 01:47 WIB

CVE-2025-48883

Chrome PHP is missing encoding in `CssSelector`

Chrome PHP allows users to start playing with chrome/chromium in headless mode from PHP. Prior to version 1.14.0, CSS Selector expressions are not properly encoded, which can lead to XSS (cross-site scripting) vulnerabilities. This is patched in v1.14.0. As a workaround, users can apply encoding manually to their selec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:47:42.853Z. Updated 2025-05-30T20:39:45.976Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:39 WIB

Official record

LowPublished 31 May 2025, 01:45 WIB

CVE-2025-48938

Prevent GitHub CLI and extensions from executing arbitrary commands from compromised GitHub Enterprise Server

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 where an attacker-controlled GitHub Enterprise Server could result in executing arbitrary commands on a user's machine by replacing HTTP URLs provided by GitHub wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:45:59.753Z. Updated 2025-05-30T20:38:51.984Z.

CVSS2.6v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:38 WIB

Official record

MedPublished 31 May 2025, 01:41 WIB

CVE-2025-48885

application-urlshortener users can create arbitrary pages as long as they have view access to them

application-urlshortener create shortened URLs for XWiki pages. Versions prior to 1.2.4 are vulnerable to users with view access being able to create arbitrary pages. Any user (even guests) can create these docs, even if they don't exist already. This can enable guest users to denature the structure of wiki pages, by c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:41:59.248Z. Updated 2025-05-30T20:37:54.729Z.

CVSS5.7v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:37 WIB

Official record

MedPublished 31 May 2025, 01:38 WIB

CVE-2025-48944

vLLM Tool Schema allows DoS via Malformed pattern and type Fields

vLLM is an inference and serving engine for large language models (LLMs). In version 0.8.0 up to but excluding 0.9.0, the vLLM backend used with the /v1/chat/completions OpenAPI endpoint fails to validate unexpected or malformed input in the "pattern" and "type" fields when the tools functionality is invoked. These inp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:38:45.505Z. Updated 2025-05-30T18:56:56.406Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated31 May 2025, 01:56 WIB

Official record

MedPublished 31 May 2025, 01:36 WIB

CVE-2025-48943

vLLM allows clients to crash the openai server with invalid regex

vLLM is an inference and serving engine for large language models (LLMs). Version 0.8.0 up to but excluding 0.9.0 have a Denial of Service (ReDoS) that causes the vLLM server to crash if an invalid regex was provided while using structured output. This vulnerability is similar to GHSA-6qc9-v4r8-22xg/CVE-2025-48942, but…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:36:01.519Z. Updated 2025-05-30T18:56:18.715Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated31 May 2025, 01:56 WIB

Official record

MedPublished 31 May 2025, 01:33 WIB

CVE-2025-48942

vLLM DOS: Remotely kill vllm over http with invalid JSON schema

vLLM is an inference and serving engine for large language models (LLMs). In versions 0.8.0 up to but excluding 0.9.0, hitting the /v1/completions API with a invalid json_schema as a Guided Param kills the vllm server. This vulnerability is similar GHSA-9hcf-v7m4-6m2j/CVE-2025-48943, but for regex instead of a JSON sc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:33:40.488Z. Updated 2025-05-30T20:37:06.015Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated31 May 2025, 03:37 WIB

Official record

MedPublished 31 May 2025, 01:31 WIB

CVE-2025-5359

Campcodes Online Hospital Management System appointment-history.php sql injection

A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. This affects an unknown part of the file /appointment-history.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:31:04.660Z. Updated 2025-05-30T20:36:17.101Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 03:36 WIB

Official record

MedPublished 31 May 2025, 01:00 WIB

CVE-2025-5358

PHPGurukul/Campcodes Cyber Cafe Management System bwdates-reports-details.php sql injection

A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be launched remotely. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T18:00:06.477Z. Updated 2025-05-30T18:15:18.480Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated31 May 2025, 01:15 WIB

Official record

MedPublished 31 May 2025, 00:37 WIB

CVE-2025-5054

Race Condition in Canonical Apport

Race condition in Canonical apport up to and including 2.32.0 allows a local attacker to leak sensitive information via PID-reuse by leveraging namespaces. When handling a crash, the function `_check_global_pid_and_forward`, which detects if the crashing process resided in a container, was being called before `cons…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T17:37:01.006Z. Updated 2025-11-03T20:05:43.609Z.

CVSS4.7v3.1KEVNot listedEPSSPresentUpdated04 Nov 2025, 03:05 WIB

Official record

MedPublished 31 May 2025, 00:36 WIB

CVE-2025-48887

vLLM has a Regular Expression Denial of Service (ReDoS, Exponential Complexity) Vulnerability in `pythonic_tool_parser.py`

vLLM, an inference and serving engine for large language models (LLMs), has a Regular Expression Denial of Service (ReDoS) vulnerability in the file `vllm/entrypoints/openai/tool_parsers/pythonic_tool_parser.py` of versions 0.6.4 up to but excluding 0.9.0. The root cause is the use of a highly complex and nested regula…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T17:36:16.716Z. Updated 2025-05-30T17:58:23.074Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated31 May 2025, 00:58 WIB

Official record