Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 81–100 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

CritPublished 30 Sep 2025, 07:12 WIB

CVE-2025-61584

serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the github.event.pull_request.head.repo.clone_url and gith…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:12:23.873Z. Updated 2025-09-30T13:33:56.830Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2025, 20:33 WIB

Official record

HighPublished 30 Sep 2025, 07:08 WIB

CVE-2025-10991

Root Access via UART

The attacker may obtain root access by connecting to the UART port and this vulnerability requires the attacker to have the physical access to the device. This issue affects Tapo D230S1 V1.20: before 1.2.2 Build 20250907.

Excerpt language: en.

Severity high: primary CNA CVSS 7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 81 to 100 of 4319.First page Next page

Published 2025-09-30T00:08:25.968Z. Updated 2025-09-30T13:40:21.308Z.

CVSS7v4.0KEVNot listedEPSSPresentUpdated30 Sep 2025, 20:40 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2024-55017

CVE-2024-55017

Account Takeover in Corezoid 6.6.0 in the OAuth2 implementation via an open redirect in the redirect_uri parameter allows attackers to intercept authorization codes and gain unauthorized access to victim accounts.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:27:55.072Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:27 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-28016

CVE-2025-28016

A Reflected Cross-Site Scripting (XSS) vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:29:13.883Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:29 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-52043

CVE-2025-52043

In Frappe ERPNext v15.57.5, the function import_coa() at erpnext/accounts/doctype/chart_of_accounts_importer/chart_of_accounts_importer.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:42:37.445Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:42 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-52047

CVE-2025-52047

In Frappe ErpNext v15.57.5, the function get_income_account() at erpnext/controllers/queries.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the filters.disabled parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:43:47.741Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:43 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-52049

CVE-2025-52049

In Frappe ErpNext v15.57.5, the function get_timesheet_detail_rate() at erpnext/projects/doctype/timesheet/timesheet.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query into the timelog parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:37:58.497Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:37 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-52050

CVE-2025-52050

In Frappe ERPNext 15.57.5, the function get_loyalty_program_details_with_points() at erpnext/accounts/doctype/loyalty_program/loyalty_program.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the expiry_date parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:41:37.443Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:41 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-55797

CVE-2025-55797

An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-01T19:57:56.551Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 02:57 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56018

CVE-2025-56018

SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:48:16.760Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:48 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56132

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2 introduces user-based lockou…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-01T20:16:22.186Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 03:16 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56200

CVE-2025-56200

A URL validation bypass vulnerability exists in validator.js through version 13.15.15. The isURL() function uses '://' as a delimiter to parse protocols, while browsers use ':' as the delimiter. This parsing difference allows attackers to bypass protocol and domain validation by crafting URLs leading to XSS and Open Re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2026-07-05T01:11:56.797Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:11 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56207

CVE-2025-56207

A security flaw in the '_transfer' function of a smart contract implementation for Money Making Opportunity (MMO), an Ethereum ERC721 Non-Fungible Token (NFT) project, allows users or attackers to transfer NFTs to the zero address, leading to permanent asset loss and non-compliance with the ERC721 standard. The eth add…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-01T20:02:53.638Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 03:02 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56301

CVE-2025-56301

An issue was discovered in Chipsalliance Rocket-Chip commit f517abbf41abb65cea37421d3559f9739efd00a9 (2025-01-29) allowing attackers to corrupt exception handling and privilege state transitions via a flawed interaction between exception handling and MRET return mechanisms in the CSR logic when an exception is triggere…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-01T19:53:58.842Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 02:53 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56392

CVE-2025-56392

An Insecure Direct Object Reference (IDOR) in the /dashboard/notes endpoint of Syaqui Collegetivity v1.0.0 allows attackers to impersonate other users and perform arbitrary operations via a crafted POST request.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-02T15:54:43.229Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 22:54 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56513

CVE-2025-56513

NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed, resulting in full remote c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2026-05-11T13:52:05.007Z.

CVSS—KEVNot listedEPSSPresentUpdated11 May 2026, 20:52 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56520

CVE-2025-56520

Dify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploadApi. A different vulnerability than CVE-2025-29720.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-10-01T20:04:03.723Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Oct 2025, 03:04 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56571

CVE-2025-56571

Finance.js v4.1.0 contains a Denial of Service (DoS) vulnerability via the IRR function’s depth parameter. Improper handling of the recursion/iteration limit can lead to excessive CPU usage, causing application stalls or crashes.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2026-07-05T01:12:29.674Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:12 WIB

Official record

UnscoredPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56572

CVE-2025-56572

An issue in finance.js v.4.1.0 allows a remote attacker to cause a denial of service via the seekZero() parameter.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2026-07-05T01:12:33.904Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:12 WIB

Official record

LowPublished 30 Sep 2025, 07:00 WIB

CVE-2025-56675

CVE-2025-56675

The EKEN video doorbell T6 BT60PLUS_MAIN_V1.0_GC1084_20230531 periodically sends debug logs to the EKEN cloud servers with sensitive information such as the Wi-Fi SSID and password.

Excerpt language: en.

Severity low: primary CNA CVSS 3.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:00:00.000Z. Updated 2025-09-30T19:32:42.572Z.

CVSS3.5v3.1KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:32 WIB

Official record