Vulnerabilities
Summary — last 7 days
New vulnerabilities4,633▼ 615 vs. last week
Critical / high1,855▼ 1,162 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)735▲ 629 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.2) | 1.3% | PoC | Squashtest Squash TM | 9/13/2018 | 6/17/2026 | Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code. | |
| Modified | High (7.5) | 46% | Exploit | Square Squash | 5/27/2014 | 6/16/2026 | The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb. |