Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,980 published records · 19 KEV · 3,980 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,980 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2446.1%
High95724%
Med1,53639%
Low1193.0%
None00.00%
Legacy00.00%
Unscored1,12428%

Matching records by UTC month

May 253,980

Signal coverage

KEV-listed: 19
With a forecast: 3,980
Unknown date: 0
Unscored severity: 1,124

Share of cohort: KEV 0.48% · forecast 100% · unscored 28%.

Showing 961–980 of 3,980By severity band: Critical · 9.0–10.0 244, High · 7.0–8.9 957, Medium · 4.0–6.9 1,536, Low · 0.1–3.9 119, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,124

HighPublished 21 May 2025, 00:24 WIB

CVE-2025-46725

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `LanceDocChatAgent` uses pandas eval() through `compute_from_docs()`. As a result, an attacker may be able to make the agent run malicious commands through `QueryPlan.dataframe_calc]`) compromising the hos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:24:31.618Z. Updated 2025-05-20T17:53:02.636Z.

CVSS8.1v4.0KEVNot listedEPSSPresentUpdated21 May 2025, 00:53 WIB

Official record

CritPublished 21 May 2025, 00:22 WIB

CVE-2025-46724

Langroid has a Code Injection vulnerability in TableChatAgent

Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, `TableChatAgent` uses `pandas eval()`. If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to `TableCh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 961 to 980 of 3980.First page Next page

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:22:13.475Z. Updated 2025-05-20T17:53:34.242Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 May 2025, 00:53 WIB

Official record

UnscoredPublished 21 May 2025, 00:18 WIB

CVE-2025-37991

parisc: Fix double SIGFPE crash

In the Linux kernel, the following vulnerability has been resolved: parisc: Fix double SIGFPE crash Camm noticed that on parisc a SIGFPE exception will crash an application with a second SIGFPE in the signal handler. Dave analyzed it, and it happens because glibc uses a double-word floating-point store to atomically…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:18:45.988Z. Updated 2026-05-11T21:19:11.846Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 21 May 2025, 00:18 WIB

CVE-2025-37990

wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() The function brcmf_usb_dl_writeimage() calls the function brcmf_usb_dl_cmd() but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized if the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:18:45.366Z. Updated 2026-05-11T21:19:10.658Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 21 May 2025, 00:09 WIB

CVE-2025-37989

net: phy: leds: fix memory leak

In the Linux kernel, the following vulnerability has been resolved: net: phy: leds: fix memory leak A network restart test on a router led to an out-of-memory condition, which was traced to a memory leak in the PHY LED trigger code. The root cause is misuse of the devm API. The registration function (phy_led_trigger…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:21.419Z. Updated 2026-05-11T21:19:09.547Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

HighPublished 21 May 2025, 00:09 WIB

CVE-2025-37988

fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()

In the Linux kernel, the following vulnerability has been resolved: fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() Normally do_lock_mount(path, _) is locking a mountpoint pinned by *path and at the time when matching unlock_mount() unlocks that location it is still pinned by the same thing. Un…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:20.765Z. Updated 2026-08-05T11:58:47.074Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 21 May 2025, 00:09 WIB

CVE-2025-37987

pds_core: Prevent possible adminq overflow/stuck condition

In the Linux kernel, the following vulnerability has been resolved: pds_core: Prevent possible adminq overflow/stuck condition The pds_core's adminq is protected by the adminq_lock, which prevents more than 1 command to be posted onto it at any one time. This makes it so the client drivers cannot simultaneously post …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:20.166Z. Updated 2026-05-11T21:19:07.251Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 21 May 2025, 00:09 WIB

CVE-2025-37986

usb: typec: class: Invalidate USB device pointers on partner unregistration

In the Linux kernel, the following vulnerability has been resolved: usb: typec: class: Invalidate USB device pointers on partner unregistration To avoid using invalid USB device pointers after a Type-C partner disconnects, this patch clears the pointers upon partner unregistration. This ensures a clean state for futu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:19.584Z. Updated 2026-05-11T21:19:06.096Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 21 May 2025, 00:09 WIB

CVE-2025-37985

USB: wdm: close race between wdm_open and wdm_wwan_port_stop

In the Linux kernel, the following vulnerability has been resolved: USB: wdm: close race between wdm_open and wdm_wwan_port_stop Clearing WDM_WWAN_IN_USE must be the last action or we can open a chardev whose URBs are still poisoned

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:18.963Z. Updated 2026-05-11T21:19:04.908Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

HighPublished 21 May 2025, 00:09 WIB

CVE-2025-37984

crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()

In the Linux kernel, the following vulnerability has been resolved: crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() Herbert notes that DIV_ROUND_UP() may overflow unnecessarily if an ecdsa implementation's ->key_size() callback returns an unusually large value. Herbert instead suggests (for a divis…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:18.321Z. Updated 2026-10-15T21:52:05.648Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record

UnscoredPublished 21 May 2025, 00:09 WIB

CVE-2025-37983

qibfs: fix _another_ leak

In the Linux kernel, the following vulnerability has been resolved: qibfs: fix _another_ leak failure to allocate inode => leaked dentry... this one had been there since the initial merge; to be fair, if we are that far OOM, the odds of failing at that particular allocation are low...

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T17:09:17.666Z. Updated 2026-05-11T21:19:01.534Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 20 May 2025, 23:58 WIB

CVE-2025-37982

wifi: wl1251: fix memory leak in wl1251_tx_work

In the Linux kernel, the following vulnerability has been resolved: wifi: wl1251: fix memory leak in wl1251_tx_work The skb dequeued from tx_queue is lost when wl1251_ps_elp_wakeup fails with a -ETIMEDOUT error. Fix that by queueing the skb back to tx_queue.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:23.861Z. Updated 2026-05-11T21:19:00.392Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:19 WIB

Official record

UnscoredPublished 20 May 2025, 23:58 WIB

CVE-2025-37981

scsi: smartpqi: Use is_kdump_kernel() to check for kdump

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Use is_kdump_kernel() to check for kdump The smartpqi driver checks the reset_devices variable to determine whether special adjustments need to be made for kdump. This has the effect that after a regular kexec reboot, some driver para…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:23.299Z. Updated 2026-05-11T21:18:59.250Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 23:58 WIB

CVE-2025-37980

block: fix resource leak in blk_register_queue() error path

In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_register() is successful but the function later encounters an error, we need to clean up the blk_mq_sysfs resources. Add the missing blk_mq…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:22.720Z. Updated 2026-10-15T01:06:21.799Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:06 WIB

Official record

HighPublished 20 May 2025, 23:58 WIB

CVE-2025-37979

ASoC: qcom: Fix sc7280 lpass potential buffer overflow

In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: Fix sc7280 lpass potential buffer overflow Case values introduced in commit 5f78e1fb7a3e ("ASoC: qcom: Add driver support for audioreach solution") cause out of bounds access in arrays of sc7280 driver data (e.g. in case of RX_CODEC_DMA_R…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:22.103Z. Updated 2026-08-05T11:58:44.888Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 20 May 2025, 23:58 WIB

CVE-2025-37978

block: integrity: Do not call set_page_dirty_lock()

In the Linux kernel, the following vulnerability has been resolved: block: integrity: Do not call set_page_dirty_lock() Placing multiple protection information buffers inside the same page can lead to oopses because set_page_dirty_lock() can't be called from interrupt context. Since a protection information buffer i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:21.422Z. Updated 2026-05-11T21:18:53.989Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

HighPublished 20 May 2025, 23:58 WIB

CVE-2025-37977

scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set If dma-coherent property isn't set then descriptors are non-cacheable and the iocc shareability bits should be disabled. Without this UFS can end up in an incompatible configuration a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:20.693Z. Updated 2026-10-21T12:36:36.163Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:36 WIB

Official record

UnscoredPublished 20 May 2025, 23:58 WIB

CVE-2025-37975

riscv: module: Fix out-of-bounds relocation access

In the Linux kernel, the following vulnerability has been resolved: riscv: module: Fix out-of-bounds relocation access The current code allows rel[j] to access one element past the end of the relocation section. Simplify to num_relocations which is equivalent to the existing size expression.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:58:19.270Z. Updated 2026-05-11T21:18:51.668Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 23:47 WIB

CVE-2025-37974

s390/pci: Fix missing check for zpci_create_device() error return

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing check for zpci_create_device() error return The zpci_create_device() function returns an error pointer that needs to be checked before dereferencing it as a struct zpci_dev pointer. Add the missing check in __clp_add() where it …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:47:19.676Z. Updated 2026-05-23T15:58:43.992Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:58 WIB

Official record

HighPublished 20 May 2025, 23:47 WIB

CVE-2025-37973

wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation Currently during the multi-link element defragmentation process, the multi-link element length added to the total IEs length when calculating the length of remaining I…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:47:19.074Z. Updated 2026-10-15T21:52:05.509Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record