Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 12,259 published records · 20 KEV · 12,259 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

12,259 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1,45512%
High4,59737%
Med3,35727%
Low3142.6%
None50.04%
Legacy00.00%
Unscored2,53121%

Matching records by UTC month

Aug 2612,259

Signal coverage

KEV-listed: 20
With a forecast: 12,259
Unknown date: 0
Unscored severity: 2,531

Share of cohort: KEV 0.16% · forecast 100% · unscored 21%.

Showing 6301–6320 of 12,259By severity band: Critical · 9.0–10.0 1,455, High · 7.0–8.9 4,597, Medium · 4.0–6.9 3,357, Low · 0.1–3.9 314, None · scored 0.0 5, Legacy · v2 only 0, Unscored · no CNA metric 2,531

MedPublished 17 Aug 2026, 08:15 WIB

CVE-2026-19970

Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack ca…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T01:15:11.322Z. Updated 2026-08-19T14:41:46.280Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated19 Aug 2026, 21:41 WIB

Official record

MedPublished 17 Aug 2026, 08:00 WIB

CVE-2026-19969

Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 6301 to 6320 of 12259.First page Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T01:00:15.969Z. Updated 2026-08-18T13:37:46.746Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated18 Aug 2026, 20:37 WIB

Official record

MedPublished 17 Aug 2026, 07:45 WIB

CVE-2026-19968

Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer overflow. The attack may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:45:14.688Z. Updated 2026-08-17T15:26:41.794Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated17 Aug 2026, 22:26 WIB

Official record

MedPublished 17 Aug 2026, 07:30 WIB

CVE-2026-19967

Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow

A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code/Common/Compression.cpp of the component File Parser. Performing a manipulation results in heap-based buffer overflow. The attack may be initiated remotely. The …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:30:11.849Z. Updated 2026-08-18T14:14:34.237Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated18 Aug 2026, 21:14 WIB

Official record

MedPublished 17 Aug 2026, 07:15 WIB

CVE-2026-19966

CodeCanyon TimeCamp Integration for CRM Contact Information Update save_contact authorization

A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save_contact of the component Contact Information Update. Such manipulation of the argument contact_id leads to authorization bypass. The attack can be launched remotely. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:15:09.037Z. Updated 2026-08-17T16:08:32.769Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated17 Aug 2026, 23:08 WIB

Official record

MedPublished 17 Aug 2026, 07:00 WIB

CVE-2026-19965

automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy

A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes observable response discrepa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:14.626Z. Updated 2026-08-19T14:46:51.376Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated19 Aug 2026, 21:46 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-38165

CVE-2026-38165

A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows attackers to execute arbitrary code via a crafted expression.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T12:08:57.532Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 19:08 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-39254

CVE-2026-39254

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, CxAudioHidDevice::DeviceGetDescriptionString components

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T16:00:50.465Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 23:00 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-39255

CVE-2026-39255

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dylib, dup_wcs components

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T15:59:23.777Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 22:59 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-42162

CVE-2026-42162

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an artefact in a page is manipulated.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T12:14:41.968Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 19:14 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-42163

CVE-2026-42163

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under certain circumstances. This applies to LTI 1.1 and LTI 1.3 Advantage.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T12:28:29.179Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 19:28 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-42164

CVE-2026-42164

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows it to recall the backed-up content from another Text section.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T12:21:06.156Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 19:21 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50768

CVE-2026-50768

File Upload vulnerability in T-Systems International GmbH ImageMaster Version: 9.14.2.8.1 allows a remote attacker to execute arbitrary code via the add attachments feature in the create new document function.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-28T13:22:50.868Z.

CVSS—KEVNot listedEPSSPresentUpdated28 Aug 2026, 20:22 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50769

CVE-2026-50769

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is vulnerable to SQL inj…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:39:54.075Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:39 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50770

CVE-2026-50770

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:38:12.089Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:38 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50771

CVE-2026-50771

Cross Site Scripting vulnerability in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-17T20:42:54.721Z.

CVSS—KEVNot listedEPSSPresentUpdated18 Aug 2026, 03:42 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50772

CVE-2026-50772

An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:32:49.922Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:32 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50773

CVE-2026-50773

An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:26:17.684Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:26 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50774

CVE-2026-50774

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:24:14.278Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:24 WIB

Official record

UnscoredPublished 17 Aug 2026, 07:00 WIB

CVE-2026-50775

CVE-2026-50775

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors directly.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-08-17T00:00:00.000Z. Updated 2026-08-18T18:17:44.916Z.

CVSS—KEVNot listedEPSSPresentUpdated19 Aug 2026, 01:17 WIB

Official record