Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 226 published records · 8 KEV · 226 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

226 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit226100%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

Sep 25226

Signal coverage

KEV-listed: 8
With a forecast: 226
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 3.5% · forecast 100% · unscored 0.00%.

Showing 1–20 of 226By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

CritPublished 01 Oct 2025, 03:00 WIB

CVE-2025-10659

MegaSys Enterprises Telenium Online Web Application OS Command Injection

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input. This vulnerability occurs due to the insecure termination of a regular expression check within the endpoint. Because the input is not correctly validated or sa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T20:00:53.126Z. Updated 2025-09-30T20:41:17.681Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 03:41 WIB

Official record

CritPublished 01 Oct 2025, 00:47 WIB

CVE-2025-10725

Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 1 to 20 of 226.Next page

Severity critical: primary CNA CVSS 9.9 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T17:47:08.577Z. Updated 2025-12-24T13:39:32.225Z.

CVSS9.9v3.1KEVNot listedEPSSPresentUpdated24 Dec 2025, 20:39 WIB

Official record

CritPublished 30 Sep 2025, 22:06 WIB

CVE-2025-7493

Freeipa: idm: privilege escalation from host to domain admin in freeipa

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T15:06:46.836Z. Updated 2026-02-26T17:47:47.013Z.

CVSS9.1v3.1KEVNot listedEPSSPresentUpdated27 Feb 2026, 00:47 WIB

Official record

CritPublished 30 Sep 2025, 20:03 WIB

CVE-2025-34217

Vasion Print (formerly PrinterLogic) Undocumented Hardcoded SSH Key

Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SaaS deployments) contain an undocumented 'printerlogic' user with a hardcoded SSH public key in '~/.ssh/authorized_keys' and a sudoers rule granting the printerlogic_ssh group 'NOPASSWD: ALL'. Possession of the matching private key gives a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T13:03:05.213Z. Updated 2025-11-17T23:56:35.568Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated18 Nov 2025, 06:56 WIB

Official record

CritPublished 30 Sep 2025, 17:05 WIB

CVE-2025-8120

Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution.This issue affects all 3 templates: www, bip and ww+bip. This pr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:05:03.496Z. Updated 2025-09-30T19:15:27.470Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:15 WIB

Official record

CritPublished 30 Sep 2025, 17:04 WIB

CVE-2025-7065

Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's photo upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, bip and ww+bip. This p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:04:07.400Z. Updated 2025-09-30T19:12:23.081Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:12 WIB

Official record

CritPublished 30 Sep 2025, 17:03 WIB

CVE-2025-7063

Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, bip and ww+bip. This pr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T10:03:59.027Z. Updated 2025-09-30T19:11:49.226Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:11 WIB

Official record

CritPublished 30 Sep 2025, 12:00 WIB

CVE-2025-11148

CVE-2025-11148

All versions of the package check-branches are vulnerable to Command Injection check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch names as they are (plai…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T05:00:06.332Z. Updated 2025-09-30T19:06:21.373Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated01 Oct 2025, 02:06 WIB

Official record

CritPublished 30 Sep 2025, 10:35 WIB

CVE-2025-9762

Post By Email <= 1.0.4b - Unauthenticated Arbitrary File Upload via Email Attachments

The Post By Email plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the save_attachments function in all versions up to, and including, 1.0.4b. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T03:35:28.206Z. Updated 2026-04-08T17:05:16.411Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:05 WIB

Official record

CritPublished 30 Sep 2025, 10:35 WIB

CVE-2025-8625

Copypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachments. As a result, una…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T03:35:25.180Z. Updated 2025-09-30T13:24:27.012Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated30 Sep 2025, 20:24 WIB

Official record

CritPublished 30 Sep 2025, 07:12 WIB

CVE-2025-61584

serverless-dns is vulnerable to Command Injection through pr.yml GitHub Action Workflow

serverless-dns is a RethinkDNS resolver that deploys to Cloudflare Workers, Deno Deploy, Fastly, and Fly.io. Versions through abd including 0.1.30 have a vulnerability where the pr.yml GitHub Action interpolates in an unsafe manner untrusted input, specifically the github.event.pull_request.head.repo.clone_url and gith…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-30T00:12:23.873Z. Updated 2025-09-30T13:33:56.830Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2025, 20:33 WIB

Official record

CritPublished 30 Sep 2025, 06:48 WIB

CVE-2025-59954

Knowage Contains a Remote Code Execution Vulnerability

Knowage is an open source analytics and business intelligence suite. Versions 8.1.26 and below are vulnerable to Remote Code Exection through using an unsafe org.apache.commons.jxpath.JXPathContext in MetaService.java service. This issue is fixed in version 8.1.27.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T23:48:04.968Z. Updated 2025-09-30T14:18:08.836Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2025, 21:18 WIB

Official record

CritPublished 30 Sep 2025, 04:29 WIB

CVE-2025-54875

FreshRSS: Unauthorized creation of admin user when registration is enabled

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user when registration is enabled through the use of a hidden field used only in the user management admin page, new_user_is_admin. This is fixed in version 1.27.0.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T21:29:50.136Z. Updated 2025-09-30T14:55:56.331Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated30 Sep 2025, 21:55 WIB

Official record

CritPublished 30 Sep 2025, 04:07 WIB

CVE-2025-30247

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST.

Excerpt language: en.

Severity critical: primary CNA CVSS 9.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T21:07:20.786Z. Updated 2025-09-30T14:56:37.134Z.

CVSS9.3v4.0KEVNot listedEPSSPresentUpdated30 Sep 2025, 21:56 WIB

Official record

CritPublished 30 Sep 2025, 03:44 WIB

CVE-2025-34235

Vasion Print (formerly PrinterLogic) Weak SSL/TLS Certificate Validation RCE

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.1.102 and Application prior to version 25.1.1413 (Windows client deployments) contain a registry key that can be enabled by administrators, causing the client to skip SSL/TLS certificate validation. An attacker who can intercept HTTPS traff…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.5 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:44:01.002Z. Updated 2026-05-15T11:15:38.083Z.

CVSS9.5v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record

CritPublished 30 Sep 2025, 03:43 WIB

CVE-2025-34221

Vasion Print (formerly PrinterLogic)

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 25.2.169 and Application prior to version 25.2.1518 (VA/SaaS deployments) expose every internal Docker container to the network because firewall rules allow unrestricted traffic to the Docker bridge network. Because no authentication, ACL or c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:43:36.637Z. Updated 2026-05-15T11:15:27.941Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record

CritPublished 30 Sep 2025, 03:43 WIB

CVE-2025-34215

Vasion Print (formerly PrinterLogic) Unauthenticated Firmware Update Endpoint RCE

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (only VA deployments) expose an unauthenticated firmware-upload flow: a public page returns a signed token usable at va-api/v1/update, and every Docker image contains the appliance’s private…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.4 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:43:12.104Z. Updated 2026-05-15T11:15:24.734Z.

CVSS9.4v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record

CritPublished 30 Sep 2025, 03:42 WIB

CVE-2025-34224

Vasion Print (formerly PrinterLogic) Unauthenticated Device Modification

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose a set of PHP scripts under the `console_release` directory without requiring authentication. An unauthenticated remote attacker can invoke these endpoints to re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:42:51.341Z. Updated 2026-05-15T11:15:30.243Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record

CritPublished 30 Sep 2025, 03:41 WIB

CVE-2025-34222

Vasion Print (formerly PrinterLogic) Unauthenticated Admin APIs Used to Modify SSL Certificates

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1049 and Application prior to version 20.0.2786 (VA/SaaS deployments) expose four admin routes – /admin/hp/cert_upload, /admin/hp/cert_delete, /admin/certs/ca, and /admin/certs/serviceclients/{scid} – without any authentication check. The…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:41:52.953Z. Updated 2026-05-15T11:15:28.671Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record

CritPublished 30 Sep 2025, 03:39 WIB

CVE-2025-34216

Vasion Print (formerly PrinterLogic) RCE and Password Leaks via API

Vasion Print (formerly PrinterLogic) Virtual Appliance Host prior to version 22.0.1026 and Application prior to version 20.0.2702 (VA deployments only) expose a set of unauthenticated REST API endpoints that return configuration files and clear‑text passwords. The same endpoints also disclose the Laravel APP_KEY used f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 10 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-29T20:39:13.361Z. Updated 2026-05-15T11:15:25.496Z.

CVSS10v4.0KEVNot listedEPSSPresentUpdated15 May 2026, 18:15 WIB

Official record