Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 2,244 published records · 3 KEV · 2,244 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

2,244 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med2,244100%
Low00.00%
None00.00%
Legacy00.00%
Unscored00.00%

Matching records by UTC month

May 262,244

Signal coverage

KEV-listed: 3
With a forecast: 2,244
Unknown date: 0
Unscored severity: 0

Share of cohort: KEV 0.13% · forecast 100% · unscored 0.00%.

Showing 1–20 of 2,244By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 2,244, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 0

MedPublished 01 Jun 2026, 06:45 WIB

CVE-2026-10204

OFCMS JSON Query SysUserController.java query sql injection

A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SysUserController.java of the component JSON Query Interface. This manipulation causes sql injection. The attack may be initiated remotely. The exploit …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T23:45:10.958Z. Updated 2026-06-01T14:59:00.848Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 21:59 WIB

Official record

MedPublished 01 Jun 2026, 06:30 WIB

CVE-2026-10203

OFCMS JSON Query SystemParamController.java query sql injection

A security flaw has been discovered in OFCMS 1.1.3. Impacted is the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemParamController.java of the component JSON Query Interface. The manipulation results in sql injection. The attack can be launched remotely. The exploit h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T23:30:13.868Z. Updated 2026-06-01T13:27:15.237Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:27 WIB

Official record

MedPublished 01 Jun 2026, 06:15 WIB

CVE-2026-10202

OFCMS JSON Query SystemDictController.java query sql injection

A vulnerability was identified in OFCMS 1.1.3. This issue affects the function Query of the file \ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\system\SystemDictController.java of the component JSON Query Interface. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T23:15:13.726Z. Updated 2026-06-03T18:43:43.917Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated04 Jun 2026, 01:43 WIB

Official record

MedPublished 01 Jun 2026, 06:00 WIB

CVE-2026-10201

Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero

A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T23:00:12.775Z. Updated 2026-06-02T14:56:38.513Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:56 WIB

Official record

MedPublished 01 Jun 2026, 05:45 WIB

CVE-2026-10200

Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow

A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T22:45:10.237Z. Updated 2026-06-01T12:26:17.051Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 19:26 WIB

Official record

MedPublished 01 Jun 2026, 05:30 WIB

CVE-2026-10199

Assimp glTF2Asset.h LazyDict null pointer dereference

A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator[] leads to null pointer dereference. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T22:30:11.424Z. Updated 2026-06-01T15:24:04.208Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:24 WIB

Official record

MedPublished 01 Jun 2026, 05:15 WIB

CVE-2026-10198

Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference

A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been published and ma…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T22:15:12.239Z. Updated 2026-06-01T14:59:43.156Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 21:59 WIB

Official record

MedPublished 01 Jun 2026, 05:00 WIB

CVE-2026-10197

Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference

A vulnerability was detected in Assimp up to 6.0.4. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit is no…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.8 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T22:00:12.850Z. Updated 2026-06-01T13:25:09.990Z.

CVSS4.8v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:25 WIB

Official record

MedPublished 01 Jun 2026, 04:11 WIB

CVE-2026-48210

Possible information disclosure via External Interface

An improper default configuration in OTRS 2026.3.1 causes ticket article forwarding actions to enforce the “Is visible for customer” flag by default and prevent users from disabling it via the UI. This leads to unintended exposure of internal ticket information to the External Frontend This issue affects OTRS 2026.3.1

Excerpt language: en.

Severity medium: primary CNA CVSS 5.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T21:11:25.337Z. Updated 2026-06-01T13:24:39.472Z.

CVSS5.7v3.1KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:24 WIB

Official record

MedPublished 31 May 2026, 23:30 WIB

CVE-2026-10194

OFFIS DCMTK dcmqrscp dcmqrdbi.cc deleteOldestImages heap-based overflow

A weakness has been identified in OFFIS DCMTK 3.7.0. This affects the function DcmQueryRetrieveIndexDatabaseHandle::deleteOldestImages of the file dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. This patch is cal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T16:30:08.129Z. Updated 2026-06-03T18:02:32.989Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated04 Jun 2026, 01:02 WIB

Official record

MedPublished 31 May 2026, 23:15 WIB

CVE-2026-10193

OFCMS ComnController ComnController.java query sql injection

A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-admin\src\main\java\com\ofsoft\cms\admin\controller\ComnController.java of the component ComnController. Performing a manipulation of the argument system.user.query results in sql injection. The attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T16:15:15.527Z. Updated 2026-06-02T14:55:21.796Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:55 WIB

Official record

MedPublished 31 May 2026, 21:00 WIB

CVE-2026-10186

code-projects Online Hospital Management System patient.php sql injection

A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /patient.php. Such manipulation of the argument editid leads to sql injection. The attack can be executed remotely. The exploit has been disclosed pub…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T14:00:11.706Z. Updated 2026-06-01T12:39:25.861Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 19:39 WIB

Official record

MedPublished 31 May 2026, 20:45 WIB

CVE-2026-10185

SourceCodester Hospitals Patient Records Management System Users.php save sql injection

A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. Affected is an unknown function of the file /classes/Users.php?f=save. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the pu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T13:45:08.141Z. Updated 2026-06-01T15:24:19.128Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:24 WIB

Official record

MedPublished 31 May 2026, 20:30 WIB

CVE-2026-10184

SourceCodester Hospitals Patient Records Management System Users.php delete sql injection

A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. This impacts an unknown function of the file /classes/Users.php?f=delete. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T13:30:09.847Z. Updated 2026-06-01T15:00:24.534Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:00 WIB

Official record

MedPublished 31 May 2026, 20:00 WIB

CVE-2026-10182

TRENDnet TEW-432BRP formWlanSetup command injection

A vulnerability was determined in TRENDnet TEW-432BRP 3.10B20. The impacted element is the function formWlanSetup of the file /goform/formWlanSetup. Executing a manipulation of the argument enrollee can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be ut…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T13:00:10.061Z. Updated 2026-06-02T14:48:13.703Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:48 WIB

Official record

MedPublished 31 May 2026, 18:15 WIB

CVE-2026-10180

TRENDnet TEW-432BRP formSysCmd command injection

A vulnerability has been found in TRENDnet TEW-432BRP 3.10B20. Impacted is the function formSysCmd of the file /goform/formSysCmd. Such manipulation of the argument sysCmd leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T11:15:06.990Z. Updated 2026-06-01T12:52:02.181Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 19:52 WIB

Official record

MedPublished 31 May 2026, 17:30 WIB

CVE-2026-10178

code-projects Online Music Site AdminEditAlbum.php sql injection

A vulnerability was detected in code-projects Online Music Site 1.0. This vulnerability affects unknown code of the file /Administrator/PHP/AdminEditAlbum.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T10:30:09.803Z. Updated 2026-06-01T15:02:19.112Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 22:02 WIB

Official record

MedPublished 31 May 2026, 17:15 WIB

CVE-2026-10177

Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery

A security vulnerability has been detected in Aider-AI Aider 0.86.3. This affects the function requests.get of the file api_docs.py of the component AWS EC2 Metadata Endpoint. The manipulation leads to server-side request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T10:15:08.202Z. Updated 2026-06-01T13:30:03.353Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jun 2026, 20:30 WIB

Official record

MedPublished 31 May 2026, 16:00 WIB

CVE-2026-10176

Aider-AI Aider Code Generation Workflow sql injection

A weakness has been identified in Aider-AI Aider 0.86.3. Affected by this issue is some unknown functionality of the component Code Generation Workflow. Executing a manipulation can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attack…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T09:00:13.581Z. Updated 2026-06-02T14:46:00.361Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:46 WIB

Official record

MedPublished 31 May 2026, 15:45 WIB

CVE-2026-10175

Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has been released to the publ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 5.3 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-05-31T08:45:07.461Z. Updated 2026-06-02T14:43:56.935Z.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated02 Jun 2026, 21:43 WIB

Official record

Showing 1 to 20 of 2244.Next page