Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 9,759 published records · 23 KEV · 9,759 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

9,759 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit9269.5%
High3,57237%
Med2,95330%
Low3183.3%
None120.12%
Legacy00.00%
Unscored1,97820%

Matching records by UTC month

Jul 269,759

Signal coverage

KEV-listed: 23
With a forecast: 9,759
Unknown date: 0
Unscored severity: 1,978

Share of cohort: KEV 0.24% · forecast 100% · unscored 20%.

Showing 81–100 of 9,759By severity band: Critical · 9.0–10.0 926, High · 7.0–8.9 3,572, Medium · 4.0–6.9 2,953, Low · 0.1–3.9 318, None · scored 0.0 12, Legacy · v2 only 0, Unscored · no CNA metric 1,978

MedPublished 31 Jul 2026, 18:40 WIB

CVE-2025-67651

CSRF in PHP Jabbers scripts

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T11:40:44.495Z. Updated 2026-07-31T19:52:27.724Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Aug 2026, 02:52 WIB

Official record

HighPublished 31 Jul 2026, 18:40 WIB

CVE-2025-67650

Authenticated SQL Injection in PHP Jabbers scripts

An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks. This issue was fixed in the versions specified in th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.6 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 81 to 100 of 9759.First page Next page

Published 2026-07-31T11:40:40.346Z. Updated 2026-07-31T19:51:58.085Z.

CVSS8.6v4.0KEVNot listedEPSSPresentUpdated01 Aug 2026, 02:51 WIB

Official record

CritPublished 31 Jul 2026, 18:40 WIB

CVE-2025-67649

Unauthenticated SQL Injection in PHP Jabbers - Car Rental Script script

A SQL injection vulnerability has been identified in PHP Jabbers - Car Rental Script . Improper neutralization of input provided by user into parameters responsible for sorting functions allows an unauthenticated attacker to perform SQL Injection attacks. This issue was fixed in version 4.1.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T11:40:25.708Z. Updated 2026-07-31T19:49:42.174Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Aug 2026, 02:49 WIB

Official record

UnscoredPublished 31 Jul 2026, 18:05 WIB

CVE-2026-44615

Path traversal in NotebookRepo note and folder path composition

Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authenticated attacker with permission to rename a note, or access to folder operations, could supply traversal segments in note or folder paths. Zeppelin composed these values into filesystem paths using th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T11:05:07.878Z. Updated 2026-07-31T16:20:12.350Z.

CVSS—KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:20 WIB

Official record

UnscoredPublished 31 Jul 2026, 17:12 WIB

CVE-2026-64607

Apache HttpComponents Client: Connection Leak on Content-Encoding Decode Error Leads to Pool Exhaustion DoS

HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message. Please note this defect does not affect HttpClient based on the async i/o model. This issue a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T10:12:18.035Z. Updated 2026-08-13T16:18:20.395Z.

CVSS—KEVNot listedEPSSPresentUpdated13 Aug 2026, 23:18 WIB

Official record

UnscoredPublished 31 Jul 2026, 16:58 WIB

CVE-2026-62391

Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases. This issue affects Apache Kyuubi: from 1.6.0 before 1.12.0. Users are recommended to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:58:15.033Z. Updated 2026-07-31T16:29:28.224Z.

CVSS—KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:29 WIB

Official record

MedPublished 31 Jul 2026, 16:32 WIB

CVE-2026-17567

Fluent Forms <= 6.2.8 - Unauthenticated Sensitive Information Exposure via Insecure Direct Object Reference and Weak Transaction Hash in 'transaction' Parameter

The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter due to missing validation on a user controlled key. This makes it possible for una…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:32:01.350Z. Updated 2026-07-31T23:25:22.575Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated01 Aug 2026, 06:25 WIB

Official record

HighPublished 31 Jul 2026, 16:31 WIB

CVE-2026-16843

CVE-2026-16843

Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:31:30.862Z. Updated 2026-08-03T05:56:30.541Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated03 Aug 2026, 12:56 WIB

Official record

HighPublished 31 Jul 2026, 16:18 WIB

CVE-2026-11770

389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean match result, the atta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:18:58.342Z. Updated 2026-10-08T14:15:08.396Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated08 Oct 2026, 21:15 WIB

Official record

HighPublished 31 Jul 2026, 16:18 WIB

CVE-2026-15722

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing

A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP server by send…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:18:50.308Z. Updated 2026-10-08T14:14:48.547Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated08 Oct 2026, 21:14 WIB

Official record

HighPublished 31 Jul 2026, 16:08 WIB

CVE-2026-10079

Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection

A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causing ACS to treat the w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T09:08:20.223Z. Updated 2026-07-31T14:54:31.439Z.

CVSS8.5v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 21:54 WIB

Official record

MedPublished 31 Jul 2026, 15:30 WIB

CVE-2026-18436

MailerPress <= 1.5.0 - Missing Authorization to Unauthenticated Arbitrary Modification via REST API Endpoint

The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<revision_id>). The route in the vulnerable range was registered without a permissionCallback, allowi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T08:30:15.838Z. Updated 2026-07-31T10:53:34.281Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 17:53 WIB

Official record

MedPublished 31 Jul 2026, 15:30 WIB

CVE-2026-18437

MailPress <= 1.5.0 - Missing Authorization to Unauthenticated Contact Updates

The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to update contact details.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T08:30:15.331Z. Updated 2026-07-31T14:50:17.110Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 21:50 WIB

Official record

HighPublished 31 Jul 2026, 14:34 WIB

CVE-2026-65313

Use of hard-coded VNC credentials in the engineering-workstation provisioning

A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the password can gain VNC access to affected …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:34:11.400Z. Updated 2026-07-31T16:32:44.345Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:32 WIB

Official record

MedPublished 31 Jul 2026, 14:30 WIB

CVE-2026-65311

Missing authentication for logging-configuration endpoint

The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service may suppress audit logging, potentially co…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:30:07.250Z. Updated 2026-07-31T16:33:32.293Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:33 WIB

Official record

HighPublished 31 Jul 2026, 14:26 WIB

CVE-2026-65310

Missing authentication and permissive CORS policy

ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values and server configuration.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:26:29.954Z. Updated 2026-07-31T16:34:44.010Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:34 WIB

Official record

HighPublished 31 Jul 2026, 14:17 WIB

CVE-2026-65309

Storage of passwords in a reversible format

ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a one-way password hash. This allows an attacker able to read the credential store or capture network traffic to recover all stored passwords.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:17:40.473Z. Updated 2026-07-31T16:36:34.930Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated31 Jul 2026, 23:36 WIB

Official record

LowPublished 31 Jul 2026, 14:08 WIB

CVE-2026-18209

Keycloak-services: keycloak-services: oidc redirect_uri fragment bypass in http parameter pollution check

A flaw was found in the keycloak-services component of Keycloak, which handles OpenID Connect (OIDC) authentication flows. The issue occurs because the security check designed to prevent HTTP parameter pollution only inspects the query portion of a redirect URL and ignores the fragment portion. When a client is configu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.4 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:08:31.373Z. Updated 2026-09-16T18:36:58.930Z.

CVSS3.4v3.1KEVNot listedEPSSPresentUpdated17 Sep 2026, 01:36 WIB

Official record

LowPublished 31 Jul 2026, 14:08 WIB

CVE-2026-18206

Keycloak-services: keycloak-services: client policy source-host wildcard domain matching bypass

A flaw was found in the keycloak-services component of Keycloak, which provides identity and access management services. The issue occurs when a realm administrator uses a wildcard domain (like *.example.com) to restrict which hosts can register or update clients. Due to improper validation, the system accepts any host…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 3.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:08:29.626Z. Updated 2026-08-31T15:11:42.287Z.

CVSS3.7v3.1KEVNot listedEPSSPresentUpdated31 Aug 2026, 22:11 WIB

Official record

MedPublished 31 Jul 2026, 14:08 WIB

CVE-2026-18214

Keycloak-services: keycloak-services: google external access-token exchange bypasses hosted-domain restriction

Keycloak allows users to log in using Google accounts and can be configured to only allow users from specific Google Workspace domains. A flaw was found where the token exchange feature, which allows swapping a Google token for a Keycloak token, does not check these domain restrictions. This means an attacker with a va…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-07-31T07:08:26.652Z. Updated 2026-09-16T18:34:27.553Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated17 Sep 2026, 01:34 WIB

Official record