Vulnerabilities
Summary — last 7 days
New vulnerabilities4,684▼ 604 vs. last week
Critical / high1,871▼ 1,180 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)746▲ 637 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.74% | PoC | Fikeulous Simpcms | 7/3/2024 | 6/17/2026 | A cross-site scripting (XSS) vulnerability in SimpCMS v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field at /admin.php. | |
| Modified | High (7.5) | 1.0% | Exploit | Simpcms | 9/18/2007 | 6/16/2026 | SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a search site action. | |
| Modified | Medium (6.8) | 2.8% | Exploit | Simpcms | 4/12/2007 | 6/16/2026 | PHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the site parameter. |