Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,813 published records · 14 KEV · 5,813 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,813 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit4587.9%
High1,71830%
Med2,45642%
Low2003.4%
None20.03%
Legacy00.00%
Unscored97917%

Matching records by UTC month

Apr 265,813

Signal coverage

KEV-listed: 14
With a forecast: 5,813
Unknown date: 0
Unscored severity: 979

Share of cohort: KEV 0.24% · forecast 100% · unscored 17%.

Showing 741–760 of 5,813By severity band: Critical · 9.0–10.0 458, High · 7.0–8.9 1,718, Medium · 4.0–6.9 2,456, Low · 0.1–3.9 200, None · scored 0.0 2, Legacy · v2 only 0, Unscored · no CNA metric 979

HighPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25294

CEWE Photoshow 6.3.4 Buffer Overflow Denial of Service

CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:23.630Z. Updated 2026-04-27T14:07:09.708Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 21:07 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25293

Prime95 29.4b7 Denial of Service via Proxy Password Field

Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 741 to 760 of 5813.First page Next page

Published 2026-04-26T13:19:22.545Z. Updated 2026-04-27T13:05:40.610Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:05 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25292

Bome Restorator 1793 Denial of Service via Buffer Overflow

Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:21.627Z. Updated 2026-04-27T13:30:58.887Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:30 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25291

Project64 2.3.2 Denial of Service via Plugin Directory

Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:20.750Z. Updated 2026-04-27T13:50:49.844Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:50 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25290

Easyboot 6.6.0 Buffer Overflow Denial of Service

Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a den…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:20.014Z. Updated 2026-04-27T16:43:57.958Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 23:43 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25289

Softdisk 3.0.3 Buffer Overflow Denial of Service

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:19.345Z. Updated 2026-04-27T20:09:21.632Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 03:09 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25288

StyleWriter 1.0 Denial of Service via Pattern Input

StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:18.671Z. Updated 2026-04-27T14:06:22.237Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 21:06 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25287

Drive Power Manager 1.10 Denial of Service via Name Field

Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:17.927Z. Updated 2026-04-27T13:08:33.585Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:08 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25286

Easy PhotoResQ 1.0 Buffer Overflow Denial of Service

Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:17.198Z. Updated 2026-04-27T13:31:06.206Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:31 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25285

Fathom 2.4 Denial of Service via Authorization Code Buffer Overflow

Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:16.485Z. Updated 2026-04-27T13:54:57.209Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:54 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25284

HD Tune Pro 5.70 Denial of Service via Options Dialog

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name inpu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:15.722Z. Updated 2026-04-27T16:44:32.310Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 23:44 WIB

Official record

HighPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25283

iSmartViewPro 1.5 Buffer Overflow via SavePath Parameter

iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the 'Save Path for Snapshot and Record file' field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH record…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:14.933Z. Updated 2026-04-27T20:08:13.168Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 03:08 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25282

Nmap 7.70 Denial of Service via XML Entity Expansion

Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the application by processing malicious XML files with exponential entity expansion. Attackers can create a crafted XML file with nested entity definitions and open it through ZenMap's scan import functionality to cause the progra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:14.211Z. Updated 2026-04-27T14:04:40.659Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 21:04 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25281

iCash 7.6.5 Denial of Service via Connect to Server

iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:10.607Z. Updated 2026-04-27T13:09:10.490Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:09 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25280

Infiltrator Network Security Scanner 4.6 Denial of Service

Infiltrator Network Security Scanner 4.6 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a 6000-byte payload into the Scan Target field and trigger a denial of service condition when the Scan button is clicked.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:09.576Z. Updated 2026-04-27T13:31:11.902Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:31 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25279

jiNa OCR Image to Text 1.0 Denial of Service via PNG

jiNa OCR Image to Text 1.0 contains a denial of service vulnerability that allows local attackers to crash the application by processing a malformed PNG file. Attackers can create a specially crafted PNG file with an oversized buffer and trigger the crash when the application attempts to convert the file to PDF.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:08.952Z. Updated 2026-04-27T14:05:39.944Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 21:05 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25278

PicaJet FX 2.6.5 Denial of Service via Registration Fields

PicaJet FX 2.6.5 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields via the Help menu's Register PicaJet dialog to trigger an a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:08.263Z. Updated 2026-04-27T16:46:04.669Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 23:46 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25277

PixGPS 1.1.8 Buffer Overflow Denial of Service

PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a payload exceeding 6000 bytes and paste it into the 'Folder with picture files' field to trigger a denial of service condition.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:07.569Z. Updated 2026-04-27T20:07:13.904Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated28 Apr 2026, 03:07 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25276

RoboImport 1.2.0.72 Denial of Service via Registration Fields

RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:06.903Z. Updated 2026-04-27T14:02:16.511Z.

CVSS6.8v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 21:02 WIB

Official record

MedPublished 26 Apr 2026, 20:19 WIB

CVE-2018-25275

Faleemi Plus 1.0.2 Denial of Service via Buffer Overflow

Faleemi Plus 1.0.2 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input strings. Attackers can paste a 2000-byte payload into the Camera name and DID number fields during camera addition to trigger an application crash.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-04-26T13:19:06.238Z. Updated 2026-04-27T13:09:35.481Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Apr 2026, 20:09 WIB

Official record