Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 1,480 published records · 8 KEV · 1,480 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

1,480 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored1,480100%

Matching records by UTC month

Dec 251,480

Signal coverage

KEV-listed: 8
With a forecast: 1,480
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.54% · forecast 100% · unscored 100%.

Showing 1–20 of 1,480By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,480

UnscoredPublished 31 Dec 2025, 13:00 WIB

CVE-2025-14434

Ultimate Post Kit < 4.0.16 – Unauthenticated Arbitrary Post Content Disclosure

The Ultimate Post Kit Addons for Elementor WordPress plugin before 4.0.16 exposes multiple AJAX “load more” endpoints such as upk_alex_grid_loadmore_posts without ensuring that posts to be displayed are published authentication. This allows an unauthenticated attacker to query arbitrary posts and retrieve rendered HTML…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-31T06:00:11.262Z. Updated 2026-01-02T14:37:14.868Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jan 2026, 21:37 WIB

Official record

UnscoredPublished 31 Dec 2025, 13:00 WIB

CVE-2025-13029

Knowband Mobile App Builder for wooCommerce < 3.0.0 – Unauthenticated Arbitrary User Deletion

The Knowband Mobile App Builder WordPress plugin before 3.0.0 does not have authorisation when deleting users via its REST API, allowing unauthenticated attackers to delete arbitrary users.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-31T06:00:03.241Z. Updated 2026-01-02T14:37:20.664Z.

Showing 1 to 20 of 1480.Next page

CVSS—KEVNot listedEPSSPresentUpdated02 Jan 2026, 21:37 WIB

Official record

UnscoredPublished 31 Dec 2025, 07:00 WIB

CVE-2025-61037

CVE-2025-61037

A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, which runs with SYSTEM privileges, creates a fixed directory and writes files without verifying wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-31T00:00:00.000Z. Updated 2026-01-02T18:05:57.530Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Jan 2026, 01:05 WIB

Official record

UnscoredPublished 31 Dec 2025, 07:00 WIB

CVE-2025-64699

CVE-2025-64699

An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an attacker to perform unauthorized raw disk operations, which…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-31T00:00:00.000Z. Updated 2026-01-02T17:40:32.273Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Jan 2026, 00:40 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:37 WIB

CVE-2023-54324

dm: fix a race condition in retrieve_deps

In the Linux kernel, the following vulnerability has been resolved: dm: fix a race condition in retrieve_deps There's a race condition in the multipath target when retrieve_deps races with multipath_message calling dm_get_device and dm_put_device. retrieve_deps walks the list of open devices without holding any lock …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:37:08.337Z. Updated 2026-05-11T19:59:45.963Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:37 WIB

CVE-2023-54323

cxl/pmem: Fix nvdimm registration races

In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix nvdimm registration races A loop of the form: while true; do modprobe cxl_pci; modprobe -r cxl_pci; done ...fails with the following crash signature: BUG: kernel NULL pointer dereference, address: 0000000000000040 [..] …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:37:07.656Z. Updated 2026-05-11T19:59:44.788Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:37 WIB

CVE-2022-50889

dm integrity: Fix UAF in dm_integrity_dtr()

In the Linux kernel, the following vulnerability has been resolved: dm integrity: Fix UAF in dm_integrity_dtr() Dm_integrity also has the same UAF problem when dm_resume() and dm_destroy() are concurrent. Therefore, cancelling timer again in dm_integrity_dtr().

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:37:06.957Z. Updated 2026-05-11T19:27:05.858Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:27 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:37 WIB

CVE-2022-50888

remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio()

In the Linux kernel, the following vulnerability has been resolved: remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() q6v5_wcss_init_mmio() will call platform_get_resource_byname() that may fail and return NULL. devm_ioremap() will use res->start as input, which may causes null-ptr-deref. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:37:06.269Z. Updated 2026-05-11T19:27:04.729Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:27 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:37 WIB

CVE-2022-50887

regulator: core: fix unbalanced of node refcount in regulator_dev_lookup()

In the Linux kernel, the following vulnerability has been resolved: regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() I got the the following report: OF: ERROR: memory leak, expected refcount 1 instead of 2, of_node_get()/of_node_put() unbalanced - destroy cset entry: attach overlay no…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:37:05.505Z. Updated 2026-05-11T19:27:03.329Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:27 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2023-54322

arm64: set __exception_irq_entry with __irq_entry as a default

In the Linux kernel, the following vulnerability has been resolved: arm64: set __exception_irq_entry with __irq_entry as a default filter_irq_stacks() is supposed to cut entries which are related irq entries from its call stack. And in_irqentry_text() which is called by filter_irq_stacks() uses __irqentry_text_start/…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:15.446Z. Updated 2026-06-01T16:04:28.197Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Jun 2026, 23:04 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2023-54321

driver core: fix potential null-ptr-deref in device_add()

In the Linux kernel, the following vulnerability has been resolved: driver core: fix potential null-ptr-deref in device_add() I got the following null-ptr-deref report while doing fault injection test: BUG: kernel NULL pointer dereference, address: 0000000000000058 CPU: 2 PID: 278 Comm: 37-i2c-ds2482 Tainted: G B…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:14.793Z. Updated 2026-05-11T19:59:42.500Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2023-54320

platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2()

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() Function amd_pmc_stb_debugfs_open_v2() may be called when the STB debug mechanism enabled. When amd_pmc_send_cmd() fails, the 'buf' needs to be released.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:14.133Z. Updated 2026-05-11T19:59:41.337Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2023-54319

pinctrl: at91-pio4: check return value of devm_kasprintf()

In the Linux kernel, the following vulnerability has been resolved: pinctrl: at91-pio4: check return value of devm_kasprintf() devm_kasprintf() returns a pointer to dynamically allocated memory. Pointer could be NULL in case allocation fails. Check pointer validity. Identified with coccinelle (kmerr.cocci script). D…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:13.468Z. Updated 2026-05-11T19:59:40.207Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2022-50886

mmc: toshsd: fix return value check of mmc_add_host()

In the Linux kernel, the following vulnerability has been resolved: mmc: toshsd: fix return value check of mmc_add_host() mmc_add_host() may return error, if we ignore its return value, the memory that allocated in mmc_alloc_host() will be leaked and it will lead a kernel crash because of deleting not added device in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:12.782Z. Updated 2026-05-11T19:27:02.120Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:27 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:34 WIB

CVE-2022-50884

drm: Prevent drm_copy_field() to attempt copying a NULL pointer

In the Linux kernel, the following vulnerability has been resolved: drm: Prevent drm_copy_field() to attempt copying a NULL pointer There are some struct drm_driver fields that are required by drivers since drm_copy_field() attempts to copy them to user-space via DRM_IOCTL_VERSION. But it can be possible that a driv…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:34:11.390Z. Updated 2026-05-11T19:26:59.632Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54316

refscale: Fix uninitalized use of wait_queue_head_t

In the Linux kernel, the following vulnerability has been resolved: refscale: Fix uninitalized use of wait_queue_head_t Running the refscale test occasionally crashes the kernel with the following error: [ 8569.952896] BUG: unable to handle page fault for address: ffffffffffffffe8 [ 8569.952900] #PF: supervisor read…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:46.526Z. Updated 2026-05-11T19:59:36.681Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54315

powerpc/powernv/sriov: perform null check on iov before dereferencing iov

In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/sriov: perform null check on iov before dereferencing iov Currently pointer iov is being dereferenced before the null check of iov which can lead to null pointer dereference errors. Fix this by moving the iov null check before the der…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:45.858Z. Updated 2026-05-11T19:59:35.468Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54314

media: af9005: Fix null-ptr-deref in af9005_i2c_xfer

In the Linux kernel, the following vulnerability has been resolved: media: af9005: Fix null-ptr-deref in af9005_i2c_xfer In af9005_i2c_xfer, msg is controlled by user. When msg[i].buf is null and msg[i].len is zero, former checks on msg[i].buf would be passed. Malicious data finally reach af9005_i2c_xfer. If accessin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:45.179Z. Updated 2026-05-11T19:59:34.318Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54313

ovl: fix null pointer dereference in ovl_get_acl_rcu()

In the Linux kernel, the following vulnerability has been resolved: ovl: fix null pointer dereference in ovl_get_acl_rcu() Following process: P1 P2 path_openat link_path_walk may_lookup inode_permission(rcu) ovl_permission acl_permission_check check_acl …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:44.484Z. Updated 2026-05-11T19:59:33.173Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54312

samples/bpf: Fix buffer overflow in tcp_basertt

In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix buffer overflow in tcp_basertt Using sizeof(nv) or strlen(nv)+1 is correct.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:43.828Z. Updated 2026-05-11T19:59:32.024Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:59 WIB

Official record