Vulnerabilities

Summary — last 7 days

New vulnerabilities5,004▲ 140 vs. last week

Critical / high2,117▼ 662 vs. last week

New active exploitation (KEV)9▼ 2 vs. last week

Unscored (no CVSS)818▲ 755 vs. last week

More filters

4 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2020-36708	Modified	Critical (9.8)	65%	Exploit	Colorlib Activello Colorlib Bonkers Colorlib Illdy Colorlib Newspaper X+12	6/7/2023	6/17/2026	The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <=…
CVE-2019-14439	Modified	High (7.5)	11%	PoC	Fasterxml Jackson-databind Debian Linux Fedoraproject Fedora Apache Drill+14	7/30/2019	10/8/2026	A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
CVE-2007-3832	Modified	High (9.3)	12%	Exploit	Cerulean Studios Trillian	7/17/2007	6/16/2026	Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execute arbitrary code via a malformed aim: URI, as demonstrated by a long URI beginning with the aim:///#1111111/ substring.
CVE-2002-1487	Modified	Medium (5)	14%	Exploit	Cerulean Studios Trillian	4/2/2003	6/16/2026	The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.