Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 4121–4140 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 20 Aug 2026, 03:10 WIB

CVE-2026-54742

Lemmy: `CollectionAdd::Featured` does not check the post is in the community

Lemmy is a link aggregator and forum for the fediverse. From 0.19.18 until 0.19.19 and 1.0.0-alpha.20, a community moderator can feature or unfeature posts in other communities through federated CollectionAdd and CollectionRemove activities using CollectionType::Featured. After verify_mod_action authorizes the actor ag…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T20:10:56.632Z. Updated 2026-08-20T20:01:19.950Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Aug 2026, 03:01 WIB

Official record

HighPublished 20 Aug 2026, 03:09 WIB

CVE-2026-16707

Power System Out-of-bounds Read

IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 4121 to 4140 of 12259.First page Next page

Published 2026-08-19T20:09:07.749Z. Updated 2026-08-21T03:57:27.564Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

HighPublished 20 Aug 2026, 03:06 WIB

CVE-2026-75593

BuildKit: Malicious client can bypass destination directory validation on local sources upload

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.2, a custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T20:06:54.924Z. Updated 2026-08-25T14:02:29.264Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:02 WIB

Official record

MedPublished 20 Aug 2026, 03:03 WIB

CVE-2026-61711

BuildKit: Custom frontend could bypass Seccomp/AppArmor

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, a custom frontend could place an invalid SecurityMode value in a crafted build request, and executor/oci/spec_linux.go treated the unsupported value as a non-sandbox mode without requi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T20:03:38.250Z. Updated 2026-08-20T13:19:05.458Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated20 Aug 2026, 20:19 WIB

Official record

LowPublished 20 Aug 2026, 03:01 WIB

CVE-2026-61712

BuildKit: Possible runtime DoS via unbounded group parsing

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in executor/oci/user.go an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T20:01:18.074Z. Updated 2026-08-21T19:04:32.635Z.

CVSS2.3v4.0KEVNot listedEPSSPresentUpdated22 Aug 2026, 02:04 WIB

Official record

MedPublished 20 Aug 2026, 03:00 WIB

CVE-2026-76574

code-projects Hospital Information System User Login UsersController.php login sql injection

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be carried out remotely. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T20:00:10.295Z. Updated 2026-08-25T14:01:32.167Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Aug 2026, 21:01 WIB

Official record

CritPublished 20 Aug 2026, 02:57 WIB

CVE-2026-16919

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:57:23.384Z. Updated 2026-08-27T16:24:52.363Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated27 Aug 2026, 23:24 WIB

Official record

CritPublished 20 Aug 2026, 02:56 WIB

CVE-2026-16917

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:56:57.320Z. Updated 2026-08-21T03:57:29.723Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

MedPublished 20 Aug 2026, 02:56 WIB

CVE-2026-16914

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:56:39.199Z. Updated 2026-08-21T03:57:30.865Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

CritPublished 20 Aug 2026, 02:55 WIB

CVE-2026-16913

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:55:59.588Z. Updated 2026-08-21T03:57:31.984Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

HighPublished 20 Aug 2026, 02:55 WIB

CVE-2026-16911

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack buffer overflow.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:55:44.051Z. Updated 2026-08-21T03:57:37.574Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

HighPublished 20 Aug 2026, 02:55 WIB

CVE-2026-16909

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an off-by-one error in bounds checking.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:55:26.238Z. Updated 2026-08-21T03:57:36.466Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

CritPublished 20 Aug 2026, 02:55 WIB

CVE-2026-16903

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code or cause a denial of service due to an out-of-bounds write.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:55:08.421Z. Updated 2026-08-21T03:57:35.283Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

HighPublished 20 Aug 2026, 02:54 WIB

CVE-2026-16901

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:54:50.591Z. Updated 2026-08-21T03:57:34.189Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

MedPublished 20 Aug 2026, 02:54 WIB

CVE-2026-16897

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to an out-of-bounds write.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:54:33.948Z. Updated 2026-08-20T15:57:04.332Z.

CVSS4.4v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:57 WIB

Official record

CritPublished 20 Aug 2026, 02:54 WIB

CVE-2026-16894

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:54:07.072Z. Updated 2026-08-21T03:57:33.099Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 Aug 2026, 10:57 WIB

Official record

LowPublished 20 Aug 2026, 02:53 WIB

CVE-2026-16891

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read.

Excerpt language: en.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:53:50.208Z. Updated 2026-08-20T15:57:04.653Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:57 WIB

Official record

LowPublished 20 Aug 2026, 02:53 WIB

CVE-2026-16890

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overflow.

Excerpt language: en.

Severity low: primary CNA CVSS 3.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:53:24.481Z. Updated 2026-08-20T15:20:37.732Z.

CVSS3.6v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 22:20 WIB

Official record

MedPublished 20 Aug 2026, 02:52 WIB

CVE-2026-16886

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:52:59.602Z. Updated 2026-08-20T13:25:29.687Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 20:25 WIB

Official record

LowPublished 20 Aug 2026, 02:51 WIB

CVE-2026-16888

Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability.

Excerpt language: en.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-19T19:51:39.990Z. Updated 2026-08-20T13:11:18.389Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated20 Aug 2026, 20:11 WIB

Official record