Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 521–540 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

MedPublished 22 Nov 2025, 04:49 WIB

CVE-2025-65107

Langfuse SSO Account Takeover via CSRF or phishing attack

Langfuse is an open source large language model engineering platform. In versions from 2.95.0 to before 2.95.12 and from 3.17.0 to before 3.131.0, in SSO provider configurations without an explicit AUTH_<PROVIDER>_CHECK setting, a potential account takeover may happen if an authenticated user is made to call a specific…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:49:18.988Z. Updated 2025-11-24T17:16:40.383Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 00:16 WIB

Official record

HighPublished 22 Nov 2025, 04:43 WIB

CVE-2025-65106

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This vulnerability affects applic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 521 to 540 of 3020.First page Next page

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:43:02.461Z. Updated 2025-11-21T21:53:19.566Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 04:53 WIB

Official record

HighPublished 22 Nov 2025, 04:36 WIB

CVE-2025-65102

PJSIP is vulnerable to buffer overflow in Opus PLC

PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio codec in receiving dire…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:36:58.375Z. Updated 2025-11-21T21:55:09.092Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 04:55 WIB

Official record

MedPublished 22 Nov 2025, 04:33 WIB

CVE-2025-65092

ESP32-P4 JPEG Decoder Header Parsing Vulnerability

ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. In versions 5.5.1, 5.4.3, and 5.3.4, when the ESP32-P4 uses its hardware JPEG decoder, the software parser lacks necessary validation checks. A specially crafted (malicious) JPEG image could exploit the parsing routine and trigger an out-of-bounds…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:33:03.656Z. Updated 2025-11-21T21:56:26.041Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 04:56 WIB

Official record

MedPublished 22 Nov 2025, 04:30 WIB

CVE-2025-0504

Black Duck SCA Project Privilege Escalation

Black Duck SCA versions prior to 2025.10.0 had user role permissions configured in an overly broad manner. Users with the scoped Project Manager user role with the Global User Read access permission enabled access to certain Project Administrator functionalities which should have be inaccessible. Exploitation does not …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:30:53.934Z. Updated 2025-11-21T21:57:07.355Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 04:57 WIB

Official record

UnscoredPublished 22 Nov 2025, 04:22 WIB

CVE-2025-31216

CVE-2025-31216

The issue was addressed with improved checks. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7. An attacker with physical access to a device may be able to override managed Wi-Fi profiles.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:22:25.231Z. Updated 2026-04-02T18:25:32.343Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 22 Nov 2025, 04:22 WIB

CVE-2025-31266

CVE-2025-31266

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name. This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:22:24.270Z. Updated 2026-04-02T18:19:21.476Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:19 WIB

Official record

UnscoredPublished 22 Nov 2025, 04:22 WIB

CVE-2025-43374

CVE-2025-43374

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 18.5 and iPadOS 18.5, iPadOS 17.7.7, macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3, tvOS 18.5, visionOS 2.5, watchOS 11.5. An attacker in physical proximity may be able to cause an out-of-bounds read in kernel …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:22:23.229Z. Updated 2026-04-02T18:18:58.447Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:18 WIB

Official record

UnscoredPublished 22 Nov 2025, 04:22 WIB

CVE-2025-31248

CVE-2025-31248

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access sensitive user data.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T21:22:22.200Z. Updated 2026-04-02T18:14:23.375Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:14 WIB

Official record

HighPublished 22 Nov 2025, 03:29 WIB

CVE-2025-11087

Zegen Core <= 2.0.1 - Cross-Site Request Forgery to Arbitrary File Upload

The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.0.1. This is due to missing nonce validation and missing file type validation in the '/custom-font-code/custom-fonts-uploads.php' file. This makes it possible for unauthenticated …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T20:29:04.613Z. Updated 2026-04-08T16:36:47.677Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 23:36 WIB

Official record

MedPublished 22 Nov 2025, 03:03 WIB

CVE-2025-13524

CVE-2025-13524

Improper resource release in the call termination process in AWS Wickr before version 6.62.13 on Windows, macOS and Linux may allow a call participant to continue receiving audio input from another user after they close their call window. This issue occurs under certain conditions, which require the affected user to ta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T20:03:54.445Z. Updated 2025-11-21T20:58:11.225Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 03:58 WIB

Official record

MedPublished 22 Nov 2025, 02:38 WIB

CVE-2025-36149

IBM Concert Software clickjacking

IBM Concert Software 1.0.0 through 2.0.0 could allow a remote attacker to hijack the clicking action of the victim.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T19:38:47.251Z. Updated 2025-11-21T19:48:34.076Z.

CVSS6.3v3.1KEVNot listedEPSSPresentUpdated22 Nov 2025, 02:48 WIB

Official record

MedPublished 22 Nov 2025, 02:07 WIB

CVE-2025-48502

CVE-2025-48502

Improper input validation within AMD uprof can allow a local attacker to overwrite MSR registers, potentially resulting in crash or denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T19:07:34.889Z. Updated 2025-11-24T21:02:33.311Z.

CVSS5.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 04:02 WIB

Official record

MedPublished 22 Nov 2025, 01:57 WIB

CVE-2025-62609

MLX has Wild Pointer Dereference in load_gguf()

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:57:45.930Z. Updated 2025-11-21T19:09:33.874Z.

CVSS5.5v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 02:09 WIB

Official record

MedPublished 22 Nov 2025, 01:56 WIB

CVE-2025-62608

MLX has heap-buffer-overflow in load()

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in v…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:56:03.939Z. Updated 2025-11-21T19:10:00.724Z.

CVSS5.5v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 02:10 WIB

Official record

HighPublished 22 Nov 2025, 01:52 WIB

CVE-2025-62626

CVE-2025-62626

Improper handling of insufficient entropy in the AMD CPUs could allow a local attacker to influence the values returned by the RDSEED instruction, potentially resulting in the consumption of insufficiently random values.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:52:57.206Z. Updated 2026-02-26T16:07:38.573Z.

CVSS7.2v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

CritPublished 22 Nov 2025, 01:47 WIB

CVE-2025-64767

hpke-js reuses AEAD nonces

hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal() calls. This can lead to complete loss of Confidentiality and Integrity of …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:47:19.930Z. Updated 2025-11-21T19:01:11.833Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated22 Nov 2025, 02:01 WIB

Official record

MedPublished 22 Nov 2025, 01:45 WIB

CVE-2025-29934

CVE-2025-29934

A bug within some AMD CPUs could allow a local admin-privileged attacker to run a SEV-SNP guest using stale TLB entries, potentially resulting in loss of data integrity.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:45:16.849Z. Updated 2025-11-23T17:30:46.143Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated24 Nov 2025, 00:30 WIB

Official record

MedPublished 22 Nov 2025, 01:39 WIB

CVE-2025-64169

Wazuh NULL pointer dereference in fim_alert line 666

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 3.7.0 to before 4.12.0, fim_alert() implementation does not check whether oldsum->md5 is NULL or not before dereferencing it. A compromised agent can cause a crash of analysisd by sending a specially crafted messa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:39:02.463Z. Updated 2025-11-21T19:05:51.973Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 02:05 WIB

Official record

LowPublished 22 Nov 2025, 01:23 WIB

CVE-2025-54866

Wazuh installation fails to protected authd.pass on Windows

Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "C:\Program Files (x86)\ossec-agent\authd.pass" exposes the password to all "Authenticated Users" on the local machine. This issue has been patched in version 4.13.0.

Excerpt language: en.

Severity low: primary CNA CVSS 1.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T18:23:49.530Z. Updated 2025-11-21T18:33:23.442Z.

CVSS1.8v4.0KEVNot listedEPSSPresentUpdated22 Nov 2025, 01:33 WIB

Official record