Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,054 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2576.3%
High1,14328%
Med1,56539%
Low1323.3%
None10.02%
Legacy00.00%
Unscored95624%

Matching records by UTC month

Nov 244,054

Signal coverage

KEV-listed: 16
With a forecast: 4,054
Unknown date: 0
Unscored severity: 956

Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.

Showing 901–920 of 4,054By severity band: Critical · 9.0–10.0 257, High · 7.0–8.9 1,143, Medium · 4.0–6.9 1,565, Low · 0.1–3.9 132, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 956

HighPublished 22 Nov 2024, 22:31 WIB

CVE-2024-50396

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 202…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T15:31:41.184Z. Updated 2024-11-22T16:44:57.056Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:44 WIB

Official record

HighPublished 22 Nov 2024, 22:31 WIB

CVE-2024-50397

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability in the following versio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.7 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 901 to 920 of 4054.First page Next page

Published 2024-11-22T15:31:34.360Z. Updated 2024-11-22T16:44:57.191Z.

CVSS7.7v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:44 WIB

Official record

LowPublished 22 Nov 2024, 22:31 WIB

CVE-2024-50398

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the followi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T15:31:27.533Z. Updated 2024-11-22T16:44:57.341Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:44 WIB

Official record

LowPublished 22 Nov 2024, 22:31 WIB

CVE-2024-50399

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the followi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T15:31:20.542Z. Updated 2024-11-22T16:44:49.629Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:44 WIB

Official record

LowPublished 22 Nov 2024, 22:31 WIB

CVE-2024-50400

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the followi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T15:31:13.326Z. Updated 2024-11-22T16:44:57.456Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:44 WIB

Official record

LowPublished 22 Nov 2024, 22:30 WIB

CVE-2024-50401

QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the vulnerability in the followi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity low: primary CNA CVSS 2.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T15:30:59.166Z. Updated 2024-11-22T16:45:59.583Z.

CVSS2.1v4.0KEVNot listedEPSSPresentUpdated22 Nov 2024, 23:45 WIB

Official record

MedPublished 22 Nov 2024, 21:38 WIB

CVE-2024-49054

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Excerpt language: en.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T14:38:50.293Z. Updated 2025-07-08T15:42:00.705Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated08 Jul 2025, 22:42 WIB

Official record

UnscoredPublished 22 Nov 2024, 21:36 WIB

CVE-2024-45719

Apache Answer: Predictable Authorization Token Using UUIDv1

Inadequate Encryption Strength vulnerability in Apache Answer. This issue affects Apache Answer: through 1.4.0. The ids generated using the UUID v1 version are to some extent not secure enough. It can cause the generated token to be predictable. Users are recommended to upgrade to version 1.4.1, which fixes the issue…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T14:36:44.588Z. Updated 2024-11-22T20:18:15.264Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Nov 2024, 03:18 WIB

Official record

CritPublished 22 Nov 2024, 19:02 WIB

CVE-2024-41779

IBM Engineering Systems Design Rhapsody - Model Manager

IBM Engineering Systems Design Rhapsody - Model Manager 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T12:02:49.422Z. Updated 2024-11-22T15:34:18.819Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated22 Nov 2024, 22:34 WIB

Official record

MedPublished 22 Nov 2024, 18:55 WIB

CVE-2024-41781

IBM PowerVM Hypervisor information disclosure

IBM PowerVM Platform KeyStore (IBM PowerVM Hypervisor FW950.00 through FW950.90, FW1030.00 through FW1030.60, FW1050.00 through FW1050.20, and FW1060.00 through FW1060.10 functionality can be compromised if an attacker gains service access to the HMC. An attacker that gains service access to the HMC can locate and thr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T11:55:52.350Z. Updated 2024-11-22T15:34:36.846Z.

CVSS5.1v3.1KEVNot listedEPSSPresentUpdated22 Nov 2024, 22:34 WIB

Official record

MedPublished 22 Nov 2024, 18:41 WIB

CVE-2024-51766

HPE NonStop DISK UTIL, Local Denial of Service vulnerability

A potential security vulnerability has been identified in the HPE NonStop DISK UTIL (T9208) product. This vulnerability could be exploited to cause a denial of service (DoS) to NonStop server. It exists in all prior DISK UTIL product versions of L-series and J-series.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T11:41:42.072Z. Updated 2024-11-26T14:20:15.172Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Nov 2024, 21:20 WIB

Official record

MedPublished 22 Nov 2024, 16:09 WIB

CVE-2021-30299

Improper Input Validation in Audio

Possible out of bound access in audio module due to lack of validation of user provided input.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T09:09:11.806Z. Updated 2024-11-22T11:37:20.689Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated22 Nov 2024, 18:37 WIB

Official record

MedPublished 22 Nov 2024, 16:09 WIB

CVE-2017-9711

Permissions, Privileges, and Access Controls in Data

Certain unprivileged processes are able to perform IOCTL calls.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T09:09:10.630Z. Updated 2024-11-22T11:40:06.357Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated22 Nov 2024, 18:40 WIB

Official record

MedPublished 22 Nov 2024, 15:49 WIB

CVE-2024-7882

SQLi in Special Minds' e-Commerce

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Special Minds Design and Software e-Commerce allows SQL Injection. This issue affects e-Commerce: before 22.11.2024.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T08:49:34.102Z. Updated 2026-06-02T08:25:09.682Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated02 Jun 2026, 15:25 WIB

Official record

HighPublished 22 Nov 2024, 15:12 WIB

CVE-2024-7837

SQLi in Firmanet Software's ERP

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: before 15.0.1.

Excerpt language: en.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T08:12:52.767Z. Updated 2026-09-04T08:14:51.814Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated04 Sep 2026, 15:14 WIB

Official record

MedPublished 22 Nov 2024, 13:15 WIB

CVE-2024-8929

Leak partial content of the heap through heap buffer over-read in mysqlnd

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests and possible other data belonging to different users of the same server.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T06:15:29.643Z. Updated 2025-11-03T22:33:10.858Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated04 Nov 2025, 05:33 WIB

Official record

CritPublished 22 Nov 2024, 13:03 WIB

CVE-2024-8932

OOB access in ldap_escape

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, uncontrolled long string inputs to ldap_escape() function on 32-bit systems can cause an integer overflow, resulting in an out-of-bounds write.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T06:03:29.764Z. Updated 2025-11-03T22:33:12.327Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated04 Nov 2025, 05:33 WIB

Official record

UnscoredPublished 22 Nov 2024, 13:00 WIB

CVE-2024-9422

GEO My WordPress < 4.5 - Admin+ Arbitrary File Upload

The GEO my WP WordPress plugin before 4.5, gmw-premium-settings WordPress plugin before 3.1 does not sufficiently validate files to be uploaded, which could allow attackers to upload arbitrary files such as PHP on the server.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T06:00:04.194Z. Updated 2024-11-22T17:52:16.250Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Nov 2024, 00:52 WIB

Official record

MedPublished 22 Nov 2024, 12:33 WIB

CVE-2024-10666

Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure

The Easy Twitter Feed – Twitter feeds plugin for WP plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.6 via the [etf] shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, privat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T05:33:43.057Z. Updated 2026-04-08T17:27:13.430Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:27 WIB

Official record

MedPublished 22 Nov 2024, 12:33 WIB

CVE-2024-8735

MailMunch – Grow your Email List <= 3.1.8 - Reflected Cross-Site Scripting

The MailMunch – Grow your Email List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.1.8. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-22T05:33:42.547Z. Updated 2026-04-08T17:16:20.096Z.

CVSS6.1v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:16 WIB

Official record