Vulnerabilities
Summary — last 7 days
New vulnerabilities4,793▲ 1,786 vs. last week
Critical / high2,645▲ 1,122 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)208▲ 38 vs. last week
27 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Low (2.6) | 1.7% | — | Krischan Jodies IP Calculator | 7/25/2006 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI environment variable), which is used in the actionurl variable. | |
| Modified | High (7.2) | 0.34% | — | Kristofer Szymanski Cocktail | 5/3/2005 | 6/16/2026 | Cocktail 3.5.4 and possibly earlier in Mac OS X passes the administrative password on the command line to sudo in cleartext, which allows local users to gain sensitive information by running listing processes. |