Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 861–880 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

HighPublished 20 Dec 2024, 08:58 WIB

CVE-2022-34159

CVE-2022-34159

Huawei printers have an input verification vulnerability. Successful exploitation of this vulnerability may cause device service exceptions. (Vulnerability ID: HWPSIRT-2022-80078) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-34159.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:58:41.400Z. Updated 2024-12-24T00:40:27.856Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated24 Dec 2024, 07:40 WIB

Official record

HighPublished 20 Dec 2024, 08:57 WIB

CVE-2022-32204

CVE-2022-32204

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. (Vulnerability ID: HWPSIRT-2022-87185) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32204.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:57:06.968Z. Updated 2024-12-24T00:40:34.532Z.

Showing 861 to 880 of 3433.First page Next page

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated24 Dec 2024, 07:40 WIB

Official record

CritPublished 20 Dec 2024, 08:54 WIB

CVE-2022-32203

CVE-2022-32203

There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privileges of the printer. (Vulnerability ID: HWPSIRT-2022-51773) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32203.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:54:16.686Z. Updated 2024-12-20T17:08:06.041Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:08 WIB

Official record

HighPublished 20 Dec 2024, 08:52 WIB

CVE-2022-32144

CVE-2022-32144

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. (Vulnerability ID: HWPSIRT-2022-76192) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32144.

Excerpt language: en.

Severity high: primary CNA CVSS 8.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:52:28.878Z. Updated 2024-12-20T17:11:36.175Z.

CVSS8.6v3.1KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:11 WIB

Official record

LowPublished 20 Dec 2024, 08:50 WIB

CVE-2020-9250

CVE-2020-9250

There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient verification, successful exploitation may impact the service. (Vulnerability ID: HWPSIRT-2019-12302) This vulnerability has…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:50:07.201Z. Updated 2024-12-20T17:14:55.905Z.

CVSS3.3v3.1KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:14 WIB

Official record

MedPublished 20 Dec 2024, 08:49 WIB

CVE-2024-12678

Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens

Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T01:49:40.583Z. Updated 2024-12-20T17:08:12.684Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:08 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:24 WIB

CVE-2024-54538

CVE-2024-54538

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1, tvOS 18.1, visionOS 2.1, watchOS 11.1. A remote attacker may be able to cause a denial-of-service.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:24:12.562Z. Updated 2026-04-02T18:24:26.507Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:24 WIB

Official record

MedPublished 20 Dec 2024, 07:05 WIB

CVE-2024-12831

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability

Arista NG Firewall uvm_login Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Arista NG Firewall. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.6 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:05:49.863Z. Updated 2024-12-20T17:37:50.042Z.

CVSS6.6v3.0KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:37 WIB

Official record

HighPublished 20 Dec 2024, 07:05 WIB

CVE-2024-12832

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability

Arista NG Firewall ReportEntry SQL Injection Arbitrary File Read and Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files and disclose sensitive information on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.3 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:05:34.744Z. Updated 2024-12-20T17:37:55.985Z.

CVSS8.3v3.0KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:37 WIB

Official record

HighPublished 20 Dec 2024, 07:05 WIB

CVE-2024-12830

Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability

Arista NG Firewall custom_handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementati…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:05:18.862Z. Updated 2024-12-20T17:38:03.994Z.

CVSS8.1v3.0KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:38 WIB

Official record

HighPublished 20 Dec 2024, 07:05 WIB

CVE-2024-12829

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability

Arista NG Firewall ExecManagerImpl Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall. Authentication is required to exploit this vulnerability. The specific flaw exists within the ExecManagerImpl c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.2 v3.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:05:08.410Z. Updated 2024-12-20T17:38:11.408Z.

CVSS7.2v3.0KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:38 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2021-40959

CVE-2021-40959

A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.1.6 and <=5.0 was identified on the subpage `/process_management/process_status.xhr.php`. This vulnerability allows an attacker to inject malicious scripts that execute in the context of the victim's s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-25T02:29:58.732Z.

CVSS—KEVNot listedEPSSPresentUpdated25 Dec 2024, 09:29 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-37758

CVE-2024-37758

Improper access control in the endpoint /RoleMenuMapping/AddRoleMenu of Digiteam v4.21.0.0 allows authenticated attackers to escalate privileges.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T19:56:37.091Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 02:56 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55186

CVE-2024-55186

An IDOR (Insecure Direct Object Reference) vulnerability exists in oqtane Framework 6.0.0, allowing a logged-in user to access inbox messages of other users by manipulating the notification ID in the request URL. By changing the notification ID, an attacker can view sensitive mail details belonging to other users.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T20:49:14.926Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 03:49 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55341

CVE-2024-55341

A stored cross-site scripting (XSS) vulnerability in Piranha CMS 11.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by creating a page via the /manager/pages and then adding a markdown content with the XSS payload.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T19:53:37.105Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 02:53 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55342

CVE-2024-55342

A file upload functionality in Piranha CMS 11.1 allows authenticated remote attackers to upload a crafted PDF file to /manager/media. This PDF can contain malicious JavaScript code, which is executed when a victim user opens or interacts with the PDF in their web browser, leading to a XSS vulnerability.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T19:59:14.577Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 02:59 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55470

CVE-2024-55470

Oqtane Framework 6.0.0 is vulnerable to Incorrect Access Control. By manipulating the entityid parameter, attackers can bypass passcode validation and successfully log into the application or access restricted data without proper authorization. The lack of server-side validation exacerbates the issue, as the applicatio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T17:25:33.514Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:25 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55471

CVE-2024-55471

Oqtane Framework is vulnerable to Insecure Direct Object Reference (IDOR) in Oqtane.Controllers.UserController. This allows unauthorized users to access sensitive information of other users by manipulating the id parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-20T17:28:59.145Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:28 WIB

Official record

UnscoredPublished 20 Dec 2024, 07:00 WIB

CVE-2024-55509

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-20T00:00:00.000Z. Updated 2024-12-26T19:27:35.434Z.

CVSS—KEVNot listedEPSSPresentUpdated27 Dec 2024, 02:27 WIB

Official record

HighPublished 20 Dec 2024, 05:50 WIB

CVE-2024-12700

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

Excerpt language: en.

Severity high: primary CNA CVSS 8.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-19T22:50:58.512Z. Updated 2024-12-20T17:38:17.699Z.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated21 Dec 2024, 00:38 WIB

Official record