Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 244 published records · 6 KEV · 244 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

244 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit244100%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

May 25244

Signal coverage

KEV-listed: 6
With a forecast: 244
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 2.5% · forecast 100% · unscored 0.00%.

Showing 1–20 of 244By severity band: Critical · 9.0–10.0 244, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

CritPublished 31 May 2025, 13:40 WIB

CVE-2025-4631

Profitori 2.0.6.0 - 2.1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via stocktend_object Endpoint

The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose '_datatype' is set to 'users',. This allows unauthenticated a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-31T06:40:58.133Z. Updated 2025-06-02T15:49:14.554Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated02 Jun 2025, 22:49 WIB

Official record

CritPublished 31 May 2025, 13:40 WIB

CVE-2025-4607

PSW Front-end Login & Registration <= 1.12 - Insufficiently Random Values to Unauthenticated Account Takeover/Privilege Escalation via customer_registration Function

The PSW Front-end Login & Registration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12 via the customer_registration() function. This is due to the use of a weak, low-entropy OTP mechanism in the forget() function. This makes it possible for unauthenticated attacker…

Showing 1 to 20 of 244.Next page

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-31T06:40:56.485Z. Updated 2026-04-08T17:12:43.620Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:12 WIB

Official record

CritPublished 30 May 2025, 19:29 WIB

CVE-2025-2500

CVE-2025-2500

A vulnerability exists in the SOAP Web services of the Asset Suite versions listed below. If successfully exploited, an attacker could gain unauthorized access to the product and the time window of a possible password attack could be expanded.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T12:29:21.370Z. Updated 2025-05-30T13:22:19.268Z.

CVSS9.1v4.0KEVNot listedEPSSPresentUpdated30 May 2025, 20:22 WIB

Official record

CritPublished 30 May 2025, 13:14 WIB

CVE-2025-48865

Fabio allows HTTP clients to manipulate custom headers it adds

Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. Prior to version 1.6.6, Fabio allows clients to remove X-Forwarded headers (except X-Forwarded-For) due to a vulnerability in how it processes hop-by-hop headers. Fabio adds HTTP headers like X-Forwarded-Host and X-Forwarded-Port when rout…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T06:14:45.819Z. Updated 2025-05-30T12:24:19.086Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated30 May 2025, 19:24 WIB

Official record

CritPublished 30 May 2025, 07:00 WIB

CVE-2025-48757

CVE-2025-48757

An insufficient database Row-Level Security policy in Lovable through 2025-04-15 allows remote unauthenticated attackers to read or write to arbitrary database tables of generated sites. NOTE: this is disputed by the Supplier because each individual customer of the Lovable platform accepts a responsibility over protect…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-30T00:00:00.000Z. Updated 2025-08-21T02:28:45.607Z.

CVSS9.3v3.1KEVNot listedEPSSPresentUpdated21 Aug 2025, 09:28 WIB

Official record

CritPublished 30 May 2025, 06:18 WIB

CVE-2025-46352

Consilium Safety CS5000 Fire Panel Use of Hard-coded Credentials

The CS5000 Fire Panel is vulnerable due to a hard-coded password that runs on a VNC server and is visible as a string in the binary responsible for running VNC. This password cannot be altered, allowing anyone with knowledge of it to gain remote access to the panel. Such access could enable an attacker to operate t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T23:18:33.934Z. Updated 2025-05-30T12:49:31.802Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 May 2025, 19:49 WIB

Official record

CritPublished 30 May 2025, 06:17 WIB

CVE-2025-41438

Consilium Safety CS5000 Fire Panel Initialization of a Resource with an Insecure Default

The CS5000 Fire Panel is vulnerable due to a default account that exists on the panel. Even though it is possible to change this by SSHing into the device, it has remained unchanged on every installed system observed. This account is not root but holds high-level permissions that could severely impact the device's …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T23:17:18.012Z. Updated 2025-05-30T12:50:16.987Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 May 2025, 19:50 WIB

Official record

CritPublished 30 May 2025, 06:12 WIB

CVE-2025-1907

Instantel Micromate Missing Authentication for Critical Function

Instantel Micromate lacks authentication on a configuration port which could allow an attacker to execute commands if connected.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T23:12:12.540Z. Updated 2025-05-30T12:50:37.021Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 May 2025, 19:50 WIB

Official record

CritPublished 30 May 2025, 02:58 WIB

CVE-2025-4967

Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS

Esri Portal for ArcGIS 11.4 and prior allows a remote, unauthenticated attacker to bypass the Portal’s SSRF protections.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T19:58:47.947Z. Updated 2025-12-15T20:01:45.607Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated16 Dec 2025, 03:01 WIB

Official record

CritPublished 30 May 2025, 02:30 WIB

CVE-2025-47933

Argo CD allows cross-site scripting on repositories page

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in the repository page, an attacker can achieve cross-site scripting with …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T19:30:39.108Z. Updated 2025-05-30T12:35:04.233Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated30 May 2025, 19:35 WIB

Official record

CritPublished 30 May 2025, 01:54 WIB

CVE-2025-48336

WordPress Course Builder < 3.6.6 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in ThimPress Course Builder course-builder allows Object Injection.This issue affects Course Builder: from n/a through < 3.6.6.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T18:54:34.068Z. Updated 2026-04-28T16:12:56.717Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated28 Apr 2026, 23:12 WIB

Official record

CritPublished 29 May 2025, 19:36 WIB

CVE-2025-48047

MICI Network Co. Ltd. NetFax Server Command Injection

An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T12:36:13.667Z. Updated 2025-05-29T13:15:14.119Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated29 May 2025, 20:15 WIB

Official record

CritPublished 29 May 2025, 11:47 WIB

CVE-2025-3755

Information Disclosure and Denial-of-Service(DoS) Vulnerability in MELSEC iQ-F Series CPU module

Improper Validation of Specified Index, Position, or Offset in Input vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules allows a remote unauthenticated attacker to read information in the product, to cause a Denial-of-Service (DoS) condition in MELSOFT connection, or to stop the operation o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-29T04:47:52.187Z. Updated 2025-08-27T08:02:37.808Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated27 Aug 2025, 15:02 WIB

Official record

CritPublished 28 May 2025, 21:51 WIB

CVE-2025-3357

IBM Tivoli Monitoring code execution

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-28T14:51:29.649Z. Updated 2026-02-26T18:27:50.921Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

CritPublished 28 May 2025, 20:14 WIB

CVE-2025-5277

CVE-2025-5277

aws-mcp-server MCP server is vulnerable to command injection. An attacker can craft a prompt that once accessed by the MCP client will run arbitrary commands on the host system.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.6 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-28T13:14:26.863Z. Updated 2025-05-28T13:27:50.584Z.

CVSS9.6v3.1KEVNot listedEPSSPresentUpdated28 May 2025, 20:27 WIB

Official record

CritPublished 28 May 2025, 14:55 WIB

CVE-2025-22252

CVE-2025-22252

A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-28T07:55:49.946Z. Updated 2026-02-26T18:27:51.978Z.

CVSS9v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 01:27 WIB

Official record

CritPublished 28 May 2025, 14:00 WIB

CVE-2025-4009

Unauthenticated Arbitrary Command Injection in Evertz SDVN

The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The app…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-28T07:00:32.896Z. Updated 2025-09-12T13:49:31.997Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated12 Sep 2025, 20:49 WIB

Official record

CritPublished 28 May 2025, 04:59 WIB

CVE-2025-32440

NetAlertX Vulnerable to Authentication Bypass

NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without authentication. An attacker can trigger sensitive functions within util.php by sending crafted requests to /index.php. This issue has been…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-27T21:59:40.497Z. Updated 2025-05-28T13:45:52.417Z.

CVSS10v3.1KEVNot listedEPSSPresentUpdated28 May 2025, 20:45 WIB

Official record

CritPublished 27 May 2025, 23:32 WIB

CVE-2025-48057

Icinga 2 certificate renewal might incorrectly renew an invalid certificate

Icinga 2 is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. Prior to versions 2.12.12, 2.13.12, and 2.14.6, the VerifyCertificate() function can be tricked into incorrectly treating certificates as valid. This allows an att…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-27T16:32:29.931Z. Updated 2025-05-27T18:27:57.002Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated28 May 2025, 01:27 WIB

Official record

CritPublished 27 May 2025, 15:38 WIB

CVE-2025-41652

Weidmueller: Authentication Bypass Vulnerability in Industrial Ethernet Switches

The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force attacks to guess valid credentials or by using MD5 collision techniques to forge authentication hashes, potentially compromising th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-27T08:38:12.340Z. Updated 2025-08-22T10:36:13.148Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated22 Aug 2025, 17:36 WIB

Official record