Vulnerabilities
Summary — last 7 days
New vulnerabilities5,325▲ 2,439 vs. last week
Critical / high2,969▲ 1,589 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
29 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.1) | 19% | 💥 PoC | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak. | |
| Modified | Critical (10) | 9.1% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets. | |
| Modified | Critical (10) | 37% | 💥 PoC | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling. | |
| Modified | Medium (5.3) | 29% | 💥 PoC | Cisco Nx-osCisco UCS ManagerDigi SarosHP X3220nr Firmware+2 | 6/2/2020 | 6/17/2026 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and other unexpected behavior due to the lack of validation to verify network packets before decapsulation and routing. |