Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,020 published records · 11 KEV · 3,020 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,020 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1755.8%
High79126%
Med1,18739%
Low1083.6%
None00.00%
Legacy00.00%
Unscored75925%

Matching records by UTC month

Nov 253,020

Signal coverage

KEV-listed: 11
With a forecast: 3,020
Unknown date: 0
Unscored severity: 759

Share of cohort: KEV 0.36% · forecast 100% · unscored 25%.

Showing 901–920 of 3,020By severity band: Critical · 9.0–10.0 175, High · 7.0–8.9 791, Medium · 4.0–6.9 1,187, Low · 0.1–3.9 108, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 759

HighPublished 19 Nov 2025, 05:32 WIB

CVE-2025-64325

Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard

Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has been patched in version…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T22:32:06.902Z. Updated 2025-11-19T16:44:25.026Z.

CVSS8.4v4.0KEVNot listedEPSSPresentUpdated19 Nov 2025, 23:44 WIB

Official record

HighPublished 19 Nov 2025, 05:18 WIB

CVE-2025-62406

Piwigo is vulnerable to one-click account takeover by modifying the password-reset link

Piwigo is a full featured open source photo gallery application for the web. In Piwigo 15.6.0, using the password reset function allows sending a password-reset URL by entering an existing username or email address. However, the hostname used to construct this URL is taken from the HTTP request's Host header and is not…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 901 to 920 of 3020.First page Next page

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T22:18:45.747Z. Updated 2025-11-19T16:48:47.058Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 23:48 WIB

Official record

MedPublished 19 Nov 2025, 05:13 WIB

CVE-2025-54990

XWiki AdminTools application doesn't set permissions on the AdminTools space

XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTools.SpammedPages. View rights are not restricted only to admin users for AdminTools.SpammedPages. While no data is visible to non admin users, the page is still …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T22:13:59.524Z. Updated 2025-11-19T21:03:14.756Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated20 Nov 2025, 04:03 WIB

Official record

HighPublished 19 Nov 2025, 05:10 WIB

CVE-2025-64324

KubeVirt Vulnerable to Arbitrary Host File Read and Write

KubeVirt is a virtual machine management add-on for Kubernetes. The `hostDisk` feature in KubeVirt allows mounting a host file or directory owned by the user with UID 107 into a VM. However, prior to version 1.6.1 and 1.7.0, the implementation of this feature and more specifically the `DiskOrCreate` option (which creat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T22:10:19.661Z. Updated 2026-02-26T16:21:07.132Z.

CVSS8.5v4.0KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

MedPublished 19 Nov 2025, 03:21 WIB

CVE-2025-12119

Bulk write with options may read invalid memory

A mongoc_bulk_operation_t may read invalid memory if large options are passed.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T20:21:08.252Z. Updated 2026-01-14T19:04:31.839Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated15 Jan 2026, 02:04 WIB

Official record

MedPublished 19 Nov 2025, 02:23 WIB

CVE-2025-37162

Authenticated Command Injection Vulnerability Leading to Arbitrary Remote Command Execution

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T19:23:20.504Z. Updated 2025-11-19T14:39:46.998Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:39 WIB

Official record

HighPublished 19 Nov 2025, 02:21 WIB

CVE-2025-37161

Unauthenticated Remote Denial-of-Service (DoS) Vulnerability in Web Management Interface

A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

Excerpt language: en.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T19:21:23.220Z. Updated 2025-11-19T14:36:15.968Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 21:36 WIB

Official record

HighPublished 19 Nov 2025, 02:06 WIB

CVE-2025-37163

Authenticated Command Injection Vulnerability in HPE Aruba Networking Management Software (AirWave) CLI

A command injection vulnerability has been identified in the command line interface of the HPE Aruba Networking Airwave Platform. An authenticated attacker could exploit this vulnerability to execute arbitrary operating system commands with elevated privileges on the underlying operating system.

Excerpt language: en.

Severity high: primary CNA CVSS 7.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T19:06:11.180Z. Updated 2026-02-26T16:21:07.761Z.

CVSS7.2v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

LowPublished 19 Nov 2025, 01:58 WIB

CVE-2025-52639

HCL Connections is vulnerable to sensitive information disclosure

HCL Connections is vulnerable to a sensitive information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to, caused by improper rendering of application data.

Excerpt language: en.

Severity low: primary CNA CVSS 3.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:58:06.174Z. Updated 2025-11-18T20:21:35.778Z.

CVSS3.5v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 03:21 WIB

Official record

MedPublished 19 Nov 2025, 01:54 WIB

CVE-2025-37160

Authenticated Broken Access Control (BAC) in REST API Configuration Service

A broken access control (BAC) vulnerability in the web-based management interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation of this vulnerability could enable the attacker to disclose sensitive data.

Excerpt language: en.

Severity medium: primary CNA CVSS 5.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:54:09.908Z. Updated 2025-11-18T20:56:20.675Z.

CVSS5.3v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 03:56 WIB

Official record

MedPublished 19 Nov 2025, 01:52 WIB

CVE-2025-37159

Authenticated Session Hijacking Allows Unauthorized Access in Network Switching Software

A vulnerability in the web management interface of the AOS-CX OS user authentication service could allow an authenticated remote attacker to hijack an active user session. Successful exploitation may enable the attacker to maintain unauthorized access to the session, potentially leading to the view or modification of s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:52:46.501Z. Updated 2026-02-26T16:21:08.333Z.

CVSS5.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

MedPublished 19 Nov 2025, 01:51 WIB

CVE-2025-37158

Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:51:28.623Z. Updated 2026-02-26T16:21:09.018Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

MedPublished 19 Nov 2025, 01:48 WIB

CVE-2025-37157

Authenticated Command Injection allows Unauthorized Command Execution in AOS-CX

A command injection vulnerability exists in the AOS-CX Operating System. Successful exploitation could allow an authenticated remote attacker to conduct a Remote Code Execution (RCE) on the affected system.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:48:58.009Z. Updated 2026-02-26T16:21:09.691Z.

CVSS6.7v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

MedPublished 19 Nov 2025, 01:46 WIB

CVE-2025-37156

ArubaOS-CX Platform-Level Denial-of-Service Vulnerability

A platform-level denial-of-service (DoS) vulnerability exists in ArubaOS-CX software. Successful exploitation of this vulnerability could allow an attacker with administrative access to execute specific code that renders the switch non-bootable and effectively non-functional.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:46:10.640Z. Updated 2025-11-18T20:28:30.645Z.

CVSS6.8v3.1KEVNot listedEPSSPresentUpdated19 Nov 2025, 03:28 WIB

Official record

HighPublished 19 Nov 2025, 01:40 WIB

CVE-2025-37155

Authenticated Privilege Escalation Allows Unauthorized Access in Network Management Interface

A vulnerability in the SSH restricted shell interface of the network management services allows improper access control for authenticated read-only users. If successfully exploited, this vulnerability could allow an attacker with read-only privileges to gain administrator access on the affected system.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:40:40.560Z. Updated 2026-02-26T16:21:10.275Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated26 Feb 2026, 23:21 WIB

Official record

MedPublished 19 Nov 2025, 01:30 WIB

CVE-2025-54770

Grub2: use-after-free in net_set_vlan

A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the net_set_vlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute this c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:30:10.347Z. Updated 2026-09-01T11:53:29.914Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 18:53 WIB

Official record

MedPublished 19 Nov 2025, 01:20 WIB

CVE-2025-61664

Grub2: missing unregister call for normal_exit command may lead to use-after-free

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:20:55.212Z. Updated 2026-09-01T11:54:02.820Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 18:54 WIB

Official record

MedPublished 19 Nov 2025, 01:20 WIB

CVE-2025-61663

Grub2: missing unregister call for normal commands may lead to use-after-free

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the syste…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:20:52.865Z. Updated 2026-09-01T11:53:58.663Z.

CVSS4.9v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 18:53 WIB

Official record

HighPublished 19 Nov 2025, 01:20 WIB

CVE-2025-61662

Grub2: missing unregister call for gettext command may lead to use-after-free

A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:20:48.351Z. Updated 2026-10-16T10:08:21.077Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 17:08 WIB

Official record

MedPublished 19 Nov 2025, 01:20 WIB

CVE-2025-61661

Grub2: grub2: out-of-bounds write via malicious usb device

A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB dev…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-11-18T18:20:42.151Z. Updated 2026-09-01T11:53:52.929Z.

CVSS4.8v3.1KEVNot listedEPSSPresentUpdated01 Sep 2026, 18:53 WIB

Official record