Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 741–760 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 24 Sep 2025, 07:00 WIB

CVE-2025-57354

CVE-2025-57354

A vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user-controlled input in translation key processing. The affected versions prior to 0.18.6 allow attackers to manipulate the library's translation functionality by supplying maliciously crafted keys conta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T00:00:00.000Z. Updated 2025-09-25T18:27:33.481Z.

CVSS—KEVNot listedEPSSPresentUpdated26 Sep 2025, 01:27 WIB

Official record

UnscoredPublished 24 Sep 2025, 07:00 WIB

CVE-2025-59305

CVE-2025-59305

Improper authorization in the background migration endpoints of Langfuse 3.1 before d67b317 allows any authenticated user to invoke migration control functions. This can lead to data corruption or denial of service through unauthorized access to TRPC endpoints such as backgroundMigrations.all, backgroundMigrations.stat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 741 to 760 of 4319.First page Next page

Published 2025-09-24T00:00:00.000Z. Updated 2025-09-25T16:29:09.850Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Sep 2025, 23:29 WIB

Official record

MedPublished 24 Sep 2025, 07:00 WIB

CVE-2025-60020

CVE-2025-60020

nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in packet data.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-24T00:00:00.000Z. Updated 2025-09-24T14:05:06.978Z.

CVSS6.4v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:05 WIB

Official record

HighPublished 24 Sep 2025, 05:27 WIB

CVE-2025-57882

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions in the Remote PLC application.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:27:02.078Z. Updated 2025-09-24T14:05:58.599Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:05 WIB

Official record

HighPublished 24 Sep 2025, 05:24 WIB

CVE-2025-55038

AutomationDirect CLICK PLUS Missing Authorization

An authorization bypass vulnerability has been discovered in the Click Plus C2-03CPU2 device firmware version 3.60. Through the KOPR protocol utilized by the Remote PLC application, authenticated users with low-level access permissions can exploit this vulnerability to read and modify PLC variables beyond their intende…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:24:28.676Z. Updated 2025-09-24T14:07:38.232Z.

CVSS7.6v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:07 WIB

Official record

HighPublished 24 Sep 2025, 05:21 WIB

CVE-2025-58473

AutomationDirect CLICK PLUS Improper Resource Shutdown or Release

An improper resource shutdown or release vulnerability has been identified in the Click Plus C2-03CPU-2 device running firmware version 3.60. The vulnerability allows an unauthenticated attacker to perform a denial-of-service attack by exhausting all available device sessions of the Click Programming Software.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:21:06.164Z. Updated 2025-09-24T14:07:48.727Z.

CVSS8.2v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:07 WIB

Official record

HighPublished 24 Sep 2025, 05:15 WIB

CVE-2025-55069

AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator

A predictable seed in pseudo-random number generator vulnerability has been discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software implements a predictable seed for its pseudo-random number generator, which compromises the security of the generated private keys…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:15:46.833Z. Updated 2025-09-24T14:07:59.115Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:07 WIB

Official record

HighPublished 24 Sep 2025, 05:08 WIB

CVE-2025-59484

AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software uses an insecure implementation of the RSA encryption algorithm.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:08:40.744Z. Updated 2025-09-24T14:08:07.973Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:08 WIB

Official record

MedPublished 24 Sep 2025, 05:04 WIB

CVE-2025-58069

AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key was discovered in firmware version 3.60 of the Click Plus PLC. The vulnerability relies on the fact that the software contains a hard-coded AES key used to protect the initial messages of a new KOPS session.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:04:58.449Z. Updated 2025-09-24T14:08:24.132Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:08 WIB

Official record

MedPublished 24 Sep 2025, 05:01 WIB

CVE-2025-54855

AutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T22:01:25.924Z. Updated 2025-09-24T14:08:37.906Z.

CVSS4.1v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 21:08 WIB

Official record

MedPublished 24 Sep 2025, 04:38 WIB

CVE-2024-21935

CVE-2024-21935

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands to remove files from the local root directory, potentially resulting in data corruption.

Excerpt language: en.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T21:38:22.057Z. Updated 2025-09-24T13:16:47.376Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 20:16 WIB

Official record

MedPublished 24 Sep 2025, 04:33 WIB

CVE-2024-21927

CVE-2024-21927

Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters in manipulated Redfish® API commands, causing service processes like OpenBMC to crash and reset, potentially resulting in denial of service.

Excerpt language: en.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T21:33:54.121Z. Updated 2025-09-24T13:18:45.108Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 20:18 WIB

Official record

MedPublished 24 Sep 2025, 04:08 WIB

CVE-2025-58354

Kata Containers coco-tdx malicious host can circumvent initdata verification

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, a malicious host can …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T21:08:47.147Z. Updated 2025-09-24T13:22:15.628Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 20:22 WIB

Official record

HighPublished 24 Sep 2025, 03:26 WIB

CVE-2025-59826

FlagForgeCTF Vulnerable to Unauthorized Problem Creation

Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious, incorrect, or misleading content. This issue has been patched in version 2.2.0.

Excerpt language: en.

Severity high: primary CNA CVSS 7.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T20:26:26.517Z. Updated 2025-09-24T13:23:04.111Z.

CVSS7.6v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 20:23 WIB

Official record

MedPublished 24 Sep 2025, 03:00 WIB

CVE-2025-59825

astral-tokio-tar has a path traversal in tar extraction

astral-tokio-tar is a tar archive reading/writing library for async Rust. In versions 0.5.3 and earlier of astral-tokio-tar, tar archives may extract outside of their intended destination directory when using the Entry::unpack_in_raw API. Additionally, the Entry::allow_external_symlinks control (which defaults to true)…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T20:00:44.253Z. Updated 2025-09-24T18:41:57.505Z.

CVSS6.1v4.0KEVNot listedEPSSPresentUpdated25 Sep 2025, 01:41 WIB

Official record

MedPublished 24 Sep 2025, 01:54 WIB

CVE-2025-59822

Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section

Http4s is a Scala interface for HTTP services. In versions from 1.0.0-M1 to before 1.0.0-M45 and before 0.23.31, http4s is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section. This vulnerability could enable attackers to bypass front-end servers security controls, launch targeted attac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T18:54:42.867Z. Updated 2025-09-23T19:17:26.320Z.

CVSS6.3v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 02:17 WIB

Official record

MedPublished 24 Sep 2025, 01:47 WIB

CVE-2025-58674

WordPress <= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPress allows Stored XSS. WordPress core security team is aware of the issue and working on a fix. This is low severity vulnerability that requires an attacker to have Author or higher user privileges to execute the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T18:47:02.628Z. Updated 2026-04-28T16:13:46.266Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:13 WIB

Official record

HighPublished 24 Sep 2025, 01:25 WIB

CVE-2025-59534

CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. Prior to version 1.4.2, there is a command Injection vulnerability in initialize_kerberos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T18:25:06.128Z. Updated 2025-09-23T19:17:45.133Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 02:17 WIB

Official record

MedPublished 24 Sep 2025, 01:18 WIB

CVE-2025-54081

SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution

Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Service Control Manager (SCM) interprets the path incrementally and may e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T18:18:39.474Z. Updated 2025-09-23T19:17:53.733Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated24 Sep 2025, 02:17 WIB

Official record

MedPublished 24 Sep 2025, 00:58 WIB

CVE-2025-59548

DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser

DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to version 10.1.0, specially crafted URLs to the FileBrowser are vulnerable to javascript injection, affecting any unsuspecting user clicking such link. This issue has been patched in version 10.1.0.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-23T17:58:55.146Z. Updated 2025-09-23T18:36:33.940Z.

CVSS5.9v4.0KEVNot listedEPSSPresentUpdated24 Sep 2025, 01:36 WIB

Official record