Vulnerabilities
Summary — last 7 days
New vulnerabilities4,511▼ 880 vs. last week
Critical / high1,766▼ 1,313 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)760▲ 667 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 96% | Exploit | Phpcollab | 10/3/2017 | 6/17/2026 | Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/. | |
| Modified | Critical (9.8) | 3.0% | Exploit | Phpcollab | 10/3/2017 | 6/17/2026 | SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php. | |
| Modified | High (7.5) | 6.3% | Exploit | NetofficePhpcollab | 3/30/2006 | 6/16/2026 | SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option. |