Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 701–720 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

LowPublished 21 Nov 2025, 01:05 WIB

CVE-2025-64524

CUPS rastertopclx Filter Vulnerable to Heap Buffer Overflow Leading to Potential Arbitrary Code Execution

cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos. In versions 2.0.1 and prior, a heap-buffer-overflow vulnerability in the rastertopclx filter causes the program to crash with a segmentation fault when processing maliciou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T18:05:06.236Z. Updated 2025-11-21T16:06:49.862Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:06 WIB

Official record

HighPublished 21 Nov 2025, 00:07 WIB

CVE-2025-64428

DataEase DB2 JNDI Vulnerability

Dataease is an open source data visualization analysis tool. Versions prior to 2.10.17 are vulnerable to JNDI injection. A blacklist was added in the patch for version 2.10.14. However, JNDI injection remains possible via the iiop, corbaname, and iiopname schemes. The vulnerability has been fixed in version 2.10.17.

Excerpt language: en.

Severity high: primary CNA CVSS 8.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 701 to 720 of 3020.First page Next page

Published 2025-11-20T17:07:00.575Z. Updated 2025-11-21T16:18:57.597Z.

CVSS8.9v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:18 WIB

Official record

MedPublished 20 Nov 2025, 23:58 WIB

CVE-2025-64185

Open OnDemand RPM packages create world writable locations

Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, Open OnDemand packages create world writable locations in the GEM_PATH. Open OnDemand versions 4.0.8 and 3.1.16 have been patched for this vulnerability.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:58:01.527Z. Updated 2025-11-21T16:57:10.499Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:57 WIB

Official record

MedPublished 20 Nov 2025, 23:53 WIB

CVE-2025-62724

Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)

Open OnDemand is an open-source HPC portal. Prior to versions 4.0.8 and 3.1.16, users can craft a "Time of Check to Time of Use" (TOCTOU) attack when downloading zip files to access files outside of the OOD_ALLOWLIST. This vulnerability impacts sites that use the file browser allowlists in all current versions of OOD. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:53:13.495Z. Updated 2025-11-21T16:56:40.807Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:56 WIB

Official record

MedPublished 20 Nov 2025, 23:50 WIB

CVE-2025-62709

ClipBucket v5 is vulnerable to password reset link manipulation

ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class.php causes the application to dynamically build the server URL from the incoming HTTP Host header when the configuration base_url is not set. Because Host is a client-controlled header, an attacker can supply …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:50:03.193Z. Updated 2025-11-21T16:33:09.195Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:33 WIB

Official record

UnscoredPublished 20 Nov 2025, 23:39 WIB

CVE-2025-12121

CVE-2025-12121

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching (core.lua), drag-and-drop file handling (rootview.lua), and the “open in system” command i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:39:05.297Z. Updated 2025-11-20T18:10:14.597Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2025, 01:10 WIB

Official record

UnscoredPublished 20 Nov 2025, 23:38 WIB

CVE-2025-12120

CVE-2025-12120

Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation. The .lite_project.lua file is intended for project-specific configuration but can contain executable Lua logic. This behavior could allow execution of untruste…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:38:29.108Z. Updated 2025-11-20T18:09:45.449Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Nov 2025, 01:09 WIB

Official record

MedPublished 20 Nov 2025, 23:25 WIB

CVE-2025-13437

Arbitrary node_modules Directory Deletion in Google zx

When zx is invoked with --prefer-local=<path>, the CLI creates a symlink named ./node_modules pointing to <path>/node_modules. Due to a logic error in src/cli.ts (linkNodeModules / cleanup), the function returns the target path instead of the alias (symlink path). The later cleanup routine removes what it received, whi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:25:16.866Z. Updated 2025-11-20T16:49:32.470Z.

CVSS5.6v4.0KEVNot listedEPSSPresentUpdated20 Nov 2025, 23:49 WIB

Official record

MedPublished 20 Nov 2025, 23:02 WIB

CVE-2025-62875

Local DoS in OpenSMTPD via UNIX domain socket smtpd.sock

An Improper Check for Unusual or Exceptional Conditions vulnerability in OpenSMTPD allows local users to crash OpenSMTPD. This issue affects openSUSE Tumbleweed: from ? before 7.8.0p0-1.1.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T16:02:11.542Z. Updated 2025-11-21T16:28:18.612Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:28 WIB

Official record

MedPublished 20 Nov 2025, 22:44 WIB

CVE-2025-62731

Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /feries endpoint. Malicious attacker with access to public holidays feature is able to inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. By default only administrators and users with special privileges are able to access thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:44:17.319Z. Updated 2025-11-21T16:24:55.256Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 23:24 WIB

Official record

HighPublished 20 Nov 2025, 22:44 WIB

CVE-2025-62730

Privilege Escalation via Incorrect Authorization in SOPlanning

SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions of users. However, they are able to assign administrative permissions to any user including themselves. This allow a malicious authenticated attacker with this role to escalate to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:44:09.430Z. Updated 2025-11-20T21:24:56.253Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:24 WIB

Official record

MedPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62729

Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /status endpoint. Malicious attacker with an account can inject arbitrary HTML and JS into website, which will be rendered/executed when opening multiple pages. This issue was fixed in version 1.55.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:59.279Z. Updated 2025-11-20T21:24:30.804Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:24 WIB

Official record

MedPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62297

Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /projets endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening edited page. This issue was fixed in version 1.55.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:56.423Z. Updated 2025-11-20T21:24:11.180Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:24 WIB

Official record

MedPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62296

Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /taches endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening editor. This issue was fixed in version 1.55.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:51.166Z. Updated 2025-11-20T21:21:16.375Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:21 WIB

Official record

MedPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62295

Stored XSS in SOPlanning

SOPlanning is vulnerable to Stored XSS in /groupe_form endpoint. Malicious attacker with medium privileges can inject arbitrary HTML and JS into website, which will be rendered/executed when opening editor. This issue was fixed in version 1.55.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:45.349Z. Updated 2025-11-20T21:11:57.203Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 04:11 WIB

Official record

HighPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62294

Predictable Generation of Password Recovery Token

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:40.993Z. Updated 2025-11-20T18:59:36.982Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 01:59 WIB

Official record

MedPublished 20 Nov 2025, 22:43 WIB

CVE-2025-62293

Broken Access Control in SOPlanning

SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:43:30.849Z. Updated 2025-11-20T19:17:39.653Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated21 Nov 2025, 02:17 WIB

Official record

CritPublished 20 Nov 2025, 22:31 WIB

CVE-2025-34320

BASIS BBj < 25.00 Unauthenticated Arbitrary File Read RCE

BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthenticated directory traversal sequences to cause the server to read arbitrary system files accessible to the account running the service. Retrieved configuration a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:31:38.794Z. Updated 2026-07-14T22:25:56.470Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

LowPublished 20 Nov 2025, 22:30 WIB

CVE-2025-13425

Denial of Service in OSV-SCALIBR

A bug in the filesystem traversal fallback path causes fs/diriterate/diriterate.go:Next() to overindex an empty slice when ReadDir returns nil for an empty directory, resulting in a panic (index out of range) and an application crash (denial of service) in OSV-SCALIBR.

Excerpt language: en.

Severity low: primary CNA CVSS 1.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:30:31.256Z. Updated 2025-11-20T16:24:21.448Z.

CVSS1.9v4.0KEVNot listedEPSSPresentUpdated20 Nov 2025, 23:24 WIB

Official record

MedPublished 20 Nov 2025, 22:26 WIB

CVE-2025-36161

IBM Concert Software Information Disclosure

IBM Concert 1.0.0 through 2.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict-Transport-Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-20T15:26:29.342Z. Updated 2025-11-20T16:30:00.600Z.

CVSS5.9v3.1KEVNot listedEPSSPresentUpdated20 Nov 2025, 23:30 WIB

Official record