Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,001 published records · 26 KEV · 4,001 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,001 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2085.2%
High1,19230%
Med1,60140%
Low1203.0%
None00.00%
Legacy00.00%
Unscored88022%

Matching records by UTC month

Mar 254,001

Signal coverage

KEV-listed: 26
With a forecast: 4,001
Unknown date: 0
Unscored severity: 880

Share of cohort: KEV 0.65% · forecast 100% · unscored 22%.

Showing 1–20 of 4,001By severity band: Critical · 9.0–10.0 208, High · 7.0–8.9 1,192, Medium · 4.0–6.9 1,601, Low · 0.1–3.9 120, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 880

MedPublished 01 Apr 2025, 06:31 WIB

CVE-2025-3041

Project Worlds Online Time Table Generator updatestudent.php unrestricted upload

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T23:31:04.411Z. Updated 2025-04-01T03:50:36.470Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 10:50 WIB

Official record

MedPublished 01 Apr 2025, 06:00 WIB

CVE-2025-3040

Project Worlds Online Time Table Generator add_student.php unrestricted upload

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_student.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotely. The exploit has bee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 4001.Next page

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T23:00:11.861Z. Updated 2025-04-01T03:51:50.285Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 10:51 WIB

Official record

MedPublished 01 Apr 2025, 06:00 WIB

CVE-2025-3039

code-projects Payroll Management System add_employee.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /add_employee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T23:00:10.116Z. Updated 2025-04-01T03:54:09.565Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 10:54 WIB

Official record

MedPublished 01 Apr 2025, 05:31 WIB

CVE-2025-3038

code-projects Payroll Management System view_account.php sql injection

A vulnerability was found in code-projects Payroll Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view_account.php. The manipulation of the argument salary_rate leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:31:06.673Z. Updated 2025-04-01T03:56:05.842Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 10:56 WIB

Official record

MedPublished 01 Apr 2025, 05:31 WIB

CVE-2025-3037

yzk2356911358 StudentServlet-JSP cross-site request forgery

A vulnerability has been found in yzk2356911358 StudentServlet-JSP cc0cdce25fbe43b6c58b60a77a2c85f52d2102f5/d4d7a0643f1dae908a4831206f2714b21820f991 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:31:04.940Z. Updated 2025-04-01T03:57:31.845Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Apr 2025, 10:57 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24167

CVE-2025-24167

This issue was addressed through improved state management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, watchOS 11.4. A download's origin may be incorrectly associated.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:26.043Z. Updated 2026-07-23T16:00:49.207Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 23:00 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-30470

CVE-2025-30470

A path handling issue was addressed with improved logic. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, visionOS 2.4, watchOS 11.4. An app may be able to read sensitive location information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:25.184Z. Updated 2026-07-23T16:00:20.594Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 23:00 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-30427

CVE-2025-30427

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, tvOS 18.4, visionOS 2.4, watchOS 11.4. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:24.350Z. Updated 2026-07-23T15:59:03.449Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 22:59 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24262

CVE-2025-24262

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.4. A sandboxed app may be able to access sensitive user data in system logs.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:23.395Z. Updated 2026-04-02T18:26:33.926Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:26 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2024-40864

CVE-2024-40864

The issue was addressed with improved handling of protocols. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.2, watchOS 11.2. An attacker in a privileged network position may be able to track a user's activity.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:22.413Z. Updated 2026-07-23T15:57:25.986Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 22:57 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24235

CVE-2025-24235

A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A remote attacker may be able to cause unexpected app termination or heap corruption.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:21.445Z. Updated 2026-07-23T15:56:47.298Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 22:56 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24242

CVE-2025-24242

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:20.418Z. Updated 2026-04-02T18:26:14.441Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:26 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24215

CVE-2025-24215

The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to access private information.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:19.564Z. Updated 2026-04-02T18:26:04.750Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:26 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24203

CVE-2025-24203

The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An app may be able to modify protected parts of the file system.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:18.620Z. Updated 2026-04-02T18:25:56.850Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24192

CVE-2025-24192

A script imports issue was addressed with improved isolation. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4. Visiting a website may leak sensitive data.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:17.665Z. Updated 2026-04-02T18:25:51.636Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24254

CVE-2025-24254

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:16.825Z. Updated 2026-04-02T18:25:45.660Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-30450

CVE-2025-30450

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access sensitive user data.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:15.951Z. Updated 2026-04-02T18:25:44.831Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-31187

CVE-2025-31187

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to modify protected parts of the file system.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:14.853Z. Updated 2026-04-02T18:25:37.915Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24278

CVE-2025-24278

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:13.916Z. Updated 2026-07-23T15:56:15.124Z.

CVSS—KEVNot listedEPSSPresentUpdated23 Jul 2026, 22:56 WIB

Official record

UnscoredPublished 01 Apr 2025, 05:24 WIB

CVE-2025-24281

CVE-2025-24281

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.4. An app may be able to access sensitive user data.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-03-31T22:24:12.958Z. Updated 2026-04-02T18:25:16.326Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Apr 2026, 01:25 WIB

Official record