Vulnerabilities
Summary — last 7 days
New vulnerabilities5,204▲ 2,436 vs. last week
Critical / high2,943▲ 1,608 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)214▲ 28 vs. last week
60 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.27% | — | Booksellerscanada Free Canadian Author Previews | 10/21/2014 | 6/17/2026 | The Free Canadian Author Previews (aka com.booksellerscanada.authorpreview) application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | |
| Modified | Medium (4.3) | 2.0% | — | Wordpress Responsive Preview Project Wordpress Responsive Preview | 7/2/2014 | 6/17/2026 | Cross-site scripting (XSS) vulnerability in index.php in the WordPress Responsive Preview plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter. | |
| Modified | Medium (4.3) | 0.84% | — | Henriksjokvist Markdown Preview | 9/28/2009 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via "Markdown input." | |
| Modified | High (7.2) | 0.89% | — | Apple MAC OS XApple MAC OS X Preview.appApple MAC OS X Server | 4/24/2007 | 6/16/2026 | Apple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment before executing commands, which allows local users to gain privileges by setting unspecified environment variables. | |
| Modified | Medium (6.8) | 4.8% | — | Apple Preview | 1/9/2007 | 6/16/2026 | The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that… | |
| Modified | Medium (6.8) | 1.8% | 💥 Exploit | Blog Torrent Preview | 11/21/2006 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter. | |
| Modified | Medium (6.8) | 1.3% | — | Zend Framework Preview | 11/15/2006 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters. | |
| Modified | Medium (4.3) | 1.2% | — | Zend Google Data Client Library Preview | 11/4/2006 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) basedemo.php and (2) calenderdemo.php in samples/, and other unspecified files. | |
| Modified | Medium (5) | 3.2% | 💥 Exploit | Blog Torrent Preview | 1/10/2005 | 6/16/2026 | Directory traversal vulnerability in btdownload.php in Blog Torrent preview 0.8 allows remote attackers to download arbitrary files via a .. (dot dot) in the file argument. | |
| Modified | Medium (4.3) | 1.4% | — | Hans Wolters Phpreview | 12/31/2001 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in phpReview 0.9.0 rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via user-submitted reviews. |