Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 968 published records · 2 KEV · 968 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

968 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored968100%

Matching records by UTC month

Mar 26968

Signal coverage

KEV-listed: 2
With a forecast: 968
Unknown date: 0
Unscored severity: 968

Share of cohort: KEV 0.21% · forecast 100% · unscored 100%.

Showing 1–20 of 968By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 968

UnscoredPublished 01 Apr 2026, 03:19 WIB

CVE-2026-3470

CVE-2026-3470

A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated attacker as admin user could exploit this issue by providing crafted input that corrupts application database.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T20:19:38.338Z. Updated 2026-03-31T20:34:15.574Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 03:34 WIB

Official record

UnscoredPublished 01 Apr 2026, 03:18 WIB

CVE-2026-3469

CVE-2026-3469

A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as admin user to cause the application to become unresponsive.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T20:18:32.521Z. Updated 2026-03-31T20:34:53.148Z.

CVSS

Showing 1 to 20 of 968.Next page

—

KEVNot listed

EPSSPresent

Updated01 Apr 2026, 03:34 WIB

Official record

UnscoredPublished 01 Apr 2026, 03:17 WIB

CVE-2026-3468

CVE-2026-3468

A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input during web page generation, allowing a remote authenticated attacker as admin user to potentially execute arbitrary JavaScript code.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T20:17:11.236Z. Updated 2026-03-31T20:35:38.252Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 03:35 WIB

Official record

UnscoredPublished 31 Mar 2026, 23:03 WIB

CVE-2026-5087

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely

PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely. PAGI::Middleware::Session::Store::Cookie attempts to read bytes from the /dev/urandom device directly. If that fails (for example, on systems without the device, such as Windows), then it will emit a warning …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T16:03:08.278Z. Updated 2026-04-01T14:43:35.295Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 21:43 WIB

Official record

UnscoredPublished 31 Mar 2026, 20:13 WIB

CVE-2026-3308

CVE-2026-3308

An integer overflow vulnerability in 'pdf-image.c' in Artifex's MuPDF version 1.27.0 allows an attacker to maliciously craft a PDF that can trigger an integer overflow within the 'pdf_load_image_imp' function. This allows a heap out-of-bounds write that could be exploited for arbitrary code execution.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T13:13:12.088Z. Updated 2026-04-21T09:32:51.075Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Apr 2026, 16:32 WIB

Official record

UnscoredPublished 31 Mar 2026, 18:31 WIB

CVE-2024-14031

Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Encoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:31:28.100Z. Updated 2026-04-01T16:30:00.649Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 23:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 18:31 WIB

CVE-2024-14030

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library

Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard (zstd) library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prior to version 1.3.8…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T11:31:08.541Z. Updated 2026-04-01T16:29:33.903Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 23:29 WIB

Official record

UnscoredPublished 31 Mar 2026, 17:04 WIB

CVE-2025-15618

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key

Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key. Business::OnlinePayment::StoredTransaction generates a secret key by using a MD5 hash of a single call to the built-in rand function, which is unsuitable for cryptographic use. This key is intended for encrypting cr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T10:04:34.763Z. Updated 2026-03-31T18:18:47.103Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 01:18 WIB

Official record

UnscoredPublished 31 Mar 2026, 13:00 WIB

CVE-2026-3881

Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF

The Performance Monitor WordPress plugin through 1.0.6 does not validate a parameter before making a request to it, which could allow unauthenticated users to perform SSRF attacks

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T06:00:06.964Z. Updated 2026-04-02T12:39:58.231Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Apr 2026, 19:39 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-29870

CVE-2026-29870

A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoint_dir parameter in OfflineACE.run. The save_to_file method in ace/skillbook.py fails to normalize or validate filesystem paths, allowing traversal sequences to escape the intended…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-03-31T15:08:04.780Z.

CVSS—KEVNot listedEPSSPresentUpdated31 Mar 2026, 22:08 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30276

CVE-2026-30276

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-04-01T18:16:00.742Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Apr 2026, 01:16 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30277

CVE-2026-30277

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:06.463Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30278

CVE-2026-30278

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:11.097Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30279

CVE-2026-30279

An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:15.000Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30280

CVE-2026-30280

An arbitrary file overwrite vulnerability in RAREPROB SOLUTIONS PRIVATE LIMITED Video player Play All Videos v1.0.135 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-04-01T14:49:03.226Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Apr 2026, 21:49 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30281

CVE-2026-30281

An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-04-01T18:14:46.520Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Apr 2026, 01:14 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30282

CVE-2026-30282

An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import process, leading to arbtrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:19.170Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30283

CVE-2026-30283

An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:23.581Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30284

CVE-2026-30284

An arbitrary file overwrite vulnerability in UXGROUP LLC Voice Recorder v10.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-07-05T01:30:28.593Z.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 08:30 WIB

Official record

UnscoredPublished 31 Mar 2026, 07:00 WIB

CVE-2026-30285

CVE-2026-30285

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-03-31T00:00:00.000Z. Updated 2026-04-02T14:39:24.734Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Apr 2026, 21:39 WIB

Official record