Vulnerabilities

Summary — last 7 days

New vulnerabilities4,625▼ 755 vs. last week
Critical / high1,827▼ 1,239 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (6.8)23%ExploitBinarymoon Timthumb10/26/20136/16/2026
TimThumb (timthumb.php) before 2.0 does not validate the entire source with the domain white list, which allows remote attackers to upload and execute arbitrary code via a URL containing a white-listed domain in the src parameter, then accessing it via a direct request to the file in the cache directory, as exploited…
ModifiedHigh (7.5)27%ExploitNvidia Binary Graphics Driver10/18/20066/16/2026
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory…