Vulnerabilities
Summary — last 7 days
New vulnerabilities4,611▼ 514 vs. last week
Critical / high1,826▼ 1,072 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)865▲ 767 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 3.5% | PoC | Dicer Project Dicer | 5/20/2022 | 6/17/2026 | This affects all versions of package dicer. A malicious attacker can send a modified form to server, and crash the nodejs service. An attacker could sent the payload again and again so that the service continuously crashes. | |
| Modified | High (7.5) | 0.91% | Exploit | Codice-cms Codice CMS | 7/2/2009 | 6/16/2026 | SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter. | |
| Modified | High (7.5) | 0.90% | Exploit | Pedro Santana Codice CMS | 2/7/2008 | 6/16/2026 | SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the username field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |