Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 721–740 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

LowPublished 24 Jun 2025, 09:10 WIB

CVE-2025-48463

Unencrypted HTTP Communication

Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.

Excerpt language: en.

Severity low: primary CNA CVSS 3.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T02:10:39.085Z. Updated 2025-06-25T13:14:07.630Z.

CVSS3.1v3.1KEVNot listedEPSSPresentUpdated25 Jun 2025, 20:14 WIB

Official record

MedPublished 24 Jun 2025, 09:08 WIB

CVE-2025-48462

Login Session Exhaustion

Successful exploitation of the vulnerability could allow an attacker to consume all available session slots and block other users from logging in, thereby preventing legitimate users from gaining access to the product.

Excerpt language: en.

Severity medium: primary CNA CVSS 4.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T02:08:58.607Z. Updated 2025-06-25T13:25:06.014Z.

Showing 721 to 740 of 3682.First page Next page

CVSS4.2v3.1

KEVNot listed

EPSSPresent

Updated25 Jun 2025, 20:25 WIB

Official record

MedPublished 24 Jun 2025, 09:02 WIB

CVE-2025-48461

Weak Session Cookie Entropy

Successful exploitation of the vulnerability could allow an unauthenticated attacker to conduct brute force guessing and account takeover as the session cookies are predictable, potentially allowing the attackers to gain root, admin or user access and reset passwords.

Excerpt language: en.

Severity medium: primary CNA CVSS 5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T02:02:08.633Z. Updated 2025-06-25T13:23:33.993Z.

CVSS5v3.1KEVNot listedEPSSPresentUpdated25 Jun 2025, 20:23 WIB

Official record

CritPublished 24 Jun 2025, 09:01 WIB

CVE-2025-6560

Sapido Wireless Router - Exposure of Sensitive Information

Multiple wireless router models from Sapido have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials. The affected models are out of support; replacing the device is recommended.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T02:01:22.300Z. Updated 2025-06-24T16:48:18.117Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 23:48 WIB

Official record

MedPublished 24 Jun 2025, 09:00 WIB

CVE-2025-6552

java-aodeng Hope-Boot Login WebController.java doLogin redirect

A vulnerability was found in java-aodeng Hope-Boot 1.0.0. It has been classified as problematic. Affected is the function doLogin of the file /src/main/java/com/hope/controller/WebController.java of the component Login. The manipulation of the argument redirect_url leads to open redirect. It is possible to launch the a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T02:00:15.980Z. Updated 2025-06-24T16:55:31.508Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 23:55 WIB

Official record

CritPublished 24 Jun 2025, 08:47 WIB

CVE-2025-6559

Sapido Wireless Router - OS Command Injection

Multiple wireless router models from Sapido have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server. The affected models are out of support; replacing the device is recommended.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:47:25.776Z. Updated 2025-06-24T15:32:51.258Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 22:32 WIB

Official record

CritPublished 24 Jun 2025, 08:39 WIB

CVE-2025-34041

Sangfor Endpoint Detection and Response OS Command Injection

An OS command injection vulnerability exists in the Chinese versions of Sangfor Endpoint Detection and Response (EDR) management platform versions 3.2.16, 3.2.17, and 3.2.19. The vulnerability allows unauthenticated attackers to construct and send malicious HTTP requests to the EDR Manager interface, leading to arbitra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:39:59.289Z. Updated 2026-07-14T22:25:39.973Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 Jul 2026, 05:25 WIB

Official record

MedPublished 24 Jun 2025, 08:31 WIB

CVE-2025-6551

java-aodeng Hope-Boot WebController.java login cross site scripting

A vulnerability was found in java-aodeng Hope-Boot 1.0.0 and classified as problematic. This issue affects the function Login of the file /src/main/java/com/hope/controller/WebController.java. The manipulation of the argument errorMsg leads to cross site scripting. The attack may be initiated remotely. The exploit has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:31:08.210Z. Updated 2025-06-24T13:28:33.434Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 20:28 WIB

Official record

MedPublished 24 Jun 2025, 08:31 WIB

CVE-2025-6536

Tarantool datetime.c tm_to_datetime assertion

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:31:06.497Z. Updated 2025-06-24T15:40:36.752Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 22:40 WIB

Official record

CritPublished 24 Jun 2025, 08:12 WIB

CVE-2025-34040

Seeyon Zhiyuan OA System Path Traversal File Upload

An arbitrary file upload vulnerability exists in the Zhiyuan OA platform via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing unauthenticated attackers to upload crafted JSP files outside of intended directories using path traversal.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:12:22.769Z. Updated 2026-05-14T02:07:28.184Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record

CritPublished 24 Jun 2025, 08:07 WIB

CVE-2025-34039

Yonyou NC BeanShell Command Injection

A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This can be exploited to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:07:05.619Z. Updated 2026-05-14T02:07:27.456Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record

HighPublished 24 Jun 2025, 08:06 WIB

CVE-2025-34038

Weaver E-cology SQL Injection

A SQL injection vulnerability exists in Weaver E-cology 8.0 via the getdata.jsp endpoint. The application directly passes unsanitized user input from the sql parameter into a database query within the getSelectAllIds(sql, type) method, reachable through the cmd=getSelectAllId workflow in the AjaxManager. This allows un…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:06:35.820Z. Updated 2026-05-14T02:07:26.667Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record

CritPublished 24 Jun 2025, 08:03 WIB

CVE-2025-34037

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to injec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:03:27.693Z. Updated 2026-07-22T14:59:37.943Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated22 Jul 2026, 21:59 WIB

Official record

CritPublished 24 Jun 2025, 08:00 WIB

CVE-2025-34036

Shenzhen TVT CCTV-DVR Command Injection

An OS command injection vulnerability exists in white-labeled DVRs manufactured by TVT, affecting a custom HTTP service called "Cross Web Server" that listens on TCP ports 81 and 82. The web interface fails to sanitize input in the URI path passed to the language extraction functionality. When the server processes a re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:00:52.579Z. Updated 2026-04-07T14:09:11.039Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

CritPublished 24 Jun 2025, 08:00 WIB

CVE-2025-34035

EnGenius EnShare IoT Gigabit Cloud Service Command Injection

An OS command injection vulnerability exists in EnGenius EnShare Cloud Service version 1.4.11 and earlier. The usbinteract.cgi script fails to properly sanitize user input passed to the path parameter, allowing unauthenticated remote attackers to inject arbitrary shell commands. The injected commands are executed with …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:00:23.862Z. Updated 2026-04-07T14:09:10.247Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

MedPublished 24 Jun 2025, 08:00 WIB

CVE-2025-6535

xxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection

A vulnerability has been found in xxyopen/201206030 novel-plus up to 5.1.3 and classified as critical. This vulnerability affects the function list of the file novel-admin/src/main/resources/mybatis/system/UserMapper.xml of the component User Management Module. The manipulation of the argument sort/order leads to sql i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T01:00:20.961Z. Updated 2025-06-24T13:31:39.305Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated24 Jun 2025, 20:31 WIB

Official record

CritPublished 24 Jun 2025, 07:59 WIB

CVE-2025-34034

5VTechnologies Blue Angel Software Suite Hardcoded Credentials

A hardcoded credential vulnerability exists in the Blue Angel Software Suite deployed on embedded Linux systems. The application contains multiple known default and hardcoded user accounts that are not disclosed in public documentation. These accounts allow unauthenticated or low-privilege attackers to gain administrat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T00:59:58.229Z. Updated 2026-04-07T14:09:09.400Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

HighPublished 24 Jun 2025, 07:59 WIB

CVE-2025-34033

5VTechnologies Blue Angel Software Suite OS Command Injection

An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can inject arbitrary comma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T00:59:49.874Z. Updated 2026-04-07T14:09:08.637Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated07 Apr 2026, 21:09 WIB

Official record

MedPublished 24 Jun 2025, 07:59 WIB

CVE-2025-34032

Moodle LMS Jmol Plugin Cross-site Scripting (XSS)

A reflected cross-site scripting (XSS) vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the data parameter in jsmol.php. The application fails to properly sanitize user input before embedding it into the HTTP response, allowing an attacker to execute arbitrary JavaScript in the victim's brow…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T00:59:26.844Z. Updated 2026-05-14T02:07:25.060Z.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record

HighPublished 24 Jun 2025, 07:58 WIB

CVE-2025-34031

Moodle LMS Jmol Plugin Path Traversal

A path traversal vulnerability exists in the Moodle LMS Jmol plugin version 6.1 and prior via the query parameter in jsmol.php. The script directly passes user input to the file_get_contents() function without proper validation, allowing attackers to read arbitrary files from the server's filesystem by crafting a malic…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-24T00:58:57.345Z. Updated 2026-05-14T02:07:24.308Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated14 May 2026, 09:07 WIB

Official record