Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 661–680 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

MedPublished 21 Nov 2025, 12:32 WIB

CVE-2025-12023

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Ticket Restore

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the eh_crm_restore_data() function in all versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with Subscriber-level a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T05:32:05.530Z. Updated 2026-04-08T16:49:36.139Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 23:49 WIB

Official record

MedPublished 21 Nov 2025, 12:32 WIB

CVE-2025-11368

LearnPress – WordPress LMS Plugin <= 4.2.9.4 - Missing Authorization to Unauthenticated Arbitrary Callback Execution to Information Exposure

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 4.2.9.4. This is due to missing capability checks in the REST endpoint /wp-json/lp/v1/load_content_via_ajax which allows arbitrary callback execution of admin-only template …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T05:32:04.912Z. Updated 2026-04-08T16:35:07.676Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated08 Apr 2026, 23:35 WIB

Official record

CritPublished 21 Nov 2025, 09:36 WIB

CVE-2025-64310

CVE-2025-64310

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T02:36:35.115Z. Updated 2025-12-23T02:28:01.044Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated23 Dec 2025, 09:28 WIB

Official record

HighPublished 21 Nov 2025, 08:29 WIB

CVE-2025-64762

authkit-nextjs may let session cookies be cached in CDNs

The AuthKit library for Next.js provides convenient helpers for authentication and session management using WorkOS & AuthKit with Next.js. In authkit-nextjs version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:29:22.606Z. Updated 2025-11-24T18:09:43.225Z.

CVSS8v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:09 WIB

Official record

MedPublished 21 Nov 2025, 08:24 WIB

CVE-2025-64751

OpenFGA Improper Policy Enforcement

OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA v1.4.0 to v1.11.0 ( openfga-0.1.34 <= Helm chart <= openfga-0.2.48, v.1.4.0 <= docker <= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject call…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:24:32.509Z. Updated 2025-11-24T18:11:03.949Z.

CVSS5.8v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:11 WIB

Official record

HighPublished 21 Nov 2025, 08:22 WIB

CVE-2025-62372

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct ndim but incorrect shape (e.g. hidden dimension is wrong), regardless of whether the model is inten…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:22:37.121Z. Updated 2025-11-24T18:11:59.207Z.

CVSS8.3v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:11 WIB

Official record

MedPublished 21 Nov 2025, 08:21 WIB

CVE-2025-62426

vLLM vulnerable to DoS via large Chat Completion or Tokenization requests with specially crafted `chat_template_kwargs`

vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to before 0.11.1, the /v1/chat/completions and /tokenize endpoints allow a chat_template_kwargs request parameter that is used in the code before it is properly validated against the chat template. With the right chat_template_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:21:29.546Z. Updated 2025-11-24T18:12:23.183Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:12 WIB

Official record

HighPublished 21 Nov 2025, 08:18 WIB

CVE-2025-62164

VLLM deserialization vulnerability leading to DoS and potential RCE

vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memory corruption vulnerability could lead to a crash (denial-of-service) and potentially remote code execution (RCE), exists in the Completions API endpoint. When processing user-supplied prompt embedding…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:18:38.803Z. Updated 2025-11-24T18:12:44.195Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:12 WIB

Official record

HighPublished 21 Nov 2025, 08:13 WIB

CVE-2025-64755

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T01:13:05.579Z. Updated 2025-11-24T18:13:06.459Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:13 WIB

Official record

MedPublished 21 Nov 2025, 07:02 WIB

CVE-2025-13485

itsourcecode Online File Management System ajax.php sql injection

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-21T00:02:06.452Z. Updated 2025-11-24T18:13:27.495Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated25 Nov 2025, 01:13 WIB

Official record

MedPublished 21 Nov 2025, 05:32 WIB

CVE-2025-13484

Campcodes Complete Online Beauty Parlor Management System customer-list.php cross site scripting

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:32:05.833Z. Updated 2026-02-24T06:36:13.914Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 13:36 WIB

Official record

HighPublished 21 Nov 2025, 05:18 WIB

CVE-2025-62459

Microsoft Defender Portal Spoofing Vulnerability

Microsoft Defender Portal Spoofing Vulnerability

Excerpt language: en.

Severity high: primary CNA CVSS 8.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:57.900Z. Updated 2026-02-26T16:07:41.207Z.

CVSS8.3v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

HighPublished 21 Nov 2025, 05:18 WIB

CVE-2025-64660

GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:57.308Z. Updated 2026-02-26T16:07:41.825Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

HighPublished 21 Nov 2025, 05:18 WIB

CVE-2025-62207

Azure Monitor Elevation of Privilege Vulnerability

Azure Monitor Elevation of Privilege Vulnerability

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:38.189Z. Updated 2026-02-26T16:07:42.620Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

CritPublished 21 Nov 2025, 05:18 WIB

CVE-2025-49752

Azure Bastion Elevation of Privilege Vulnerability

Azure Bastion Elevation of Privilege Vulnerability

Excerpt language: en.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:37.511Z. Updated 2026-02-26T16:07:43.342Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

CritPublished 21 Nov 2025, 05:18 WIB

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability

Microsoft SharePoint Online Elevation of Privilege Vulnerability

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:36.895Z. Updated 2026-02-26T16:07:44.091Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

HighPublished 21 Nov 2025, 05:18 WIB

CVE-2025-64655

Dynamics OmniChannel SDK Storage Containers Elevation of Privilege Vulnerability

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:18:36.195Z. Updated 2026-02-26T16:07:45.249Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:07 WIB

Official record

HighPublished 21 Nov 2025, 05:09 WIB

CVE-2025-36072

IBM webMethods Integration Deserialization

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T22:09:42.477Z. Updated 2025-11-21T15:51:57.885Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated21 Nov 2025, 22:51 WIB

Official record

HighPublished 21 Nov 2025, 04:32 WIB

CVE-2025-13087

Command Injection in Opto22 Groov REST API

A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges. When a POST request is executed against the vulnerable endpoint, the application reads certain header details and unsafely uses these values to build commands, allowing a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T21:32:37.510Z. Updated 2025-11-21T16:01:40.324Z.

CVSS7.5v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:01 WIB

Official record

MedPublished 21 Nov 2025, 04:21 WIB

CVE-2025-36153

IBM Concert Cross-Site Scripting

IBM Concert 1.0.0 through 2.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T21:21:04.869Z. Updated 2025-11-20T21:35:26.690Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:35 WIB

Official record

Showing 661 to 680 of 3020.First page Next page