Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 621–640 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

HighPublished 25 Sep 2025, 03:25 WIB

CVE-2025-59833

FlagForgeCTF Hint Exposure via API

Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in plaintext within the question object, regardless of whether the user has unlocked them via point deduction. Users can view all hints for free, undermining the busine…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T20:25:35.167Z. Updated 2025-09-24T20:44:08.116Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 03:44 WIB

Official record

HighPublished 25 Sep 2025, 03:23 WIB

CVE-2025-59827

FlagForgeCTF is Missing Authorization in main-v2

Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any authenticated user to assign high-privilege badges (e.g., Staff) to themselves. This could lead to privilege escalation and impersonation of administrative roles. This issue …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 621 to 640 of 4319.First page Next page

Published 2025-09-24T20:23:59.156Z. Updated 2025-09-24T20:39:24.431Z.

CVSS8.2v3.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 03:39 WIB

Official record

LowPublished 25 Sep 2025, 02:48 WIB

CVE-2025-59824

Omni Wireguard SideroLink potential escape

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer (P2P) SideroLink connection using WireGuard to mutually authenticate and authorize access. The WireGuard interface …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 0.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T19:48:23.935Z. Updated 2025-09-24T20:09:36.681Z.

CVSS0.5v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 03:09 WIB

Official record

HighPublished 25 Sep 2025, 02:30 WIB

CVE-2025-59828

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

Claude Code is an agentic coding tool. Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions 2.0+, Yarn plugins are auto-executed when running yarn --version. This could lead to a bypass of the directory trust dialog in Claude Code, as plugins would be executed prior to the user accepting the r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T19:30:09.297Z. Updated 2025-09-24T19:49:14.654Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 02:49 WIB

Official record

HighPublished 25 Sep 2025, 02:03 WIB

CVE-2025-59251

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Excerpt language: en.

Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T19:03:48.446Z. Updated 2026-02-26T17:47:59.084Z.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

HighPublished 25 Sep 2025, 02:03 WIB

CVE-2025-55322

OmniParser Remote Code Execution Vulnerability

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T19:03:47.718Z. Updated 2026-02-20T16:01:12.180Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated20 Feb 2026, 23:01 WIB

Official record

UnscoredPublished 25 Sep 2025, 01:31 WIB

CVE-2025-55178

CVE-2025-55178

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolve_ast_by_type function which could potentially allow for remote code execution.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T18:31:28.309Z. Updated 2025-09-24T18:50:01.680Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Sep 2025, 01:50 WIB

Official record

HighPublished 25 Sep 2025, 01:15 WIB

CVE-2025-59525

Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG (and via allowed <embed>), which can be chained to execute JavaScript whenever users view impacted content (e.g., announcements). This can result in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T18:15:12.850Z. Updated 2025-10-15T16:06:11.174Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated15 Oct 2025, 23:06 WIB

Official record

HighPublished 25 Sep 2025, 01:12 WIB

CVE-2025-59524

Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel

Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation (for example, with an intercepting proxy or by submitting a crafted r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T18:12:55.990Z. Updated 2025-09-24T18:46:57.973Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 01:46 WIB

Official record

HighPublished 25 Sep 2025, 01:12 WIB

CVE-2025-52907

TOTOLINK X6000R Security Bypass Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T18:12:36.634Z. Updated 2025-09-24T18:46:23.907Z.

CVSS7.3v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 01:46 WIB

Official record

MedPublished 25 Sep 2025, 00:53 WIB

CVE-2025-20314

CVE-2025-20314

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to an affected device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to improper validation of software pack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:53:45.663Z. Updated 2026-02-26T17:47:59.705Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

CritPublished 25 Sep 2025, 00:44 WIB

CVE-2025-52906

TOTOLINK X6000R Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:44:29.539Z. Updated 2025-09-24T18:24:07.786Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 01:24 WIB

Official record

HighPublished 25 Sep 2025, 00:43 WIB

CVE-2025-59343

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4, and 1.16.6. A workaround involves using the ignore option o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:43:34.728Z. Updated 2025-11-03T18:13:55.412Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated04 Nov 2025, 01:13 WIB

Official record

MedPublished 25 Sep 2025, 00:25 WIB

CVE-2025-48867

Horilla Stored Cross-Site Scripting (XSS) Vulnerability in Project and Task Modules

Horilla is a free and open source Human Resource Management System (HRMS). A stored cross-site scripting (XSS) vulnerability in Horilla HRM 1.3.0 allows authenticated admin or privileged users to inject malicious JavaScript payloads into multiple fields in the Project and Task modules. These payloads persist in the dat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:25:42.227Z. Updated 2025-09-24T17:36:10.261Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 00:36 WIB

Official record

HighPublished 25 Sep 2025, 00:17 WIB

CVE-2025-48869

Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control

Horilla is a free and open source Human Resource Management System (HRMS). Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrieve sensitive candidate information witho…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:17:40.979Z. Updated 2025-09-24T17:26:56.854Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 00:26 WIB

Official record

MedPublished 25 Sep 2025, 00:16 WIB

CVE-2025-20316

CVE-2025-20316

A vulnerability in the access control list (ACL) programming of Cisco IOS XE Software for Cisco Catalyst 9500X and 9600X Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL on an affected device. This vulnerability is due to the flooding of traffic from an unlearned MAC address…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:16:45.155Z. Updated 2025-09-24T17:28:43.201Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 00:28 WIB

Official record

MedPublished 25 Sep 2025, 00:15 WIB

CVE-2025-20293

CVE-2025-20293

A vulnerability in the Day One setup process of Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud (9800-CL) could allow an unauthenticated, remote attacker to access the public-key infrastructure (PKI) server that is running on an affected device. This vulnerability is due to incomplete c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:15:19.849Z. Updated 2025-09-24T17:31:27.798Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 00:31 WIB

Official record

MedPublished 25 Sep 2025, 00:14 WIB

CVE-2025-20338

CVE-2025-20338

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to spe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:14:57.638Z. Updated 2026-02-26T17:48:00.835Z.

CVSS6v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:48 WIB

Official record

MedPublished 25 Sep 2025, 00:14 WIB

CVE-2025-20240

CVE-2025-20240

A vulnerability in the Web Authentication feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting attack (XSS) on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:14:34.470Z. Updated 2025-09-26T17:12:35.657Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated27 Sep 2025, 00:12 WIB

Official record

MedPublished 25 Sep 2025, 00:14 WIB

CVE-2025-20149

CVE-2025-20149

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T17:14:03.164Z. Updated 2025-09-24T17:32:27.719Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated25 Sep 2025, 00:32 WIB

Official record