Vulnerabilities
Summary — last 7 days
New vulnerabilities4,728▲ 1,690 vs. last week
Critical / high2,619▲ 1,098 vs. last week
New active exploitation (KEV)7▲ 2 vs. last week
Unscored (no CVSS)169▼ 1 vs. last week
131 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (10) | 75% | 💥 Exploit | Broadcom Advantage Data TransportBroadcom AdviseitBroadcom Brightstor PortalBroadcom Brightstor SAN Manager+24 | 8/23/2005 | 6/16/2026 | Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors. | |
| Modified | Medium (5) | 1.8% | — | Clever Copy | 7/19/2005 | 6/16/2026 | Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10)… | |
| Modified | Medium (4.3) | 1.4% | — | Class-1 ForumClever Copy | 7/19/2005 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php. | |
| Modified | Medium (4.3) | 2.8% | 💥 Exploit | Clever Copy | 7/19/2005 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php. | |
| Modified | Medium (4.3) | 2.7% | 💥 Exploit | Clever Copy | 7/19/2005 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php. | |
| Modified | High (7.5) | 2.7% | 💥 Exploit | Class-1 ForumClever Copy | 7/19/2005 | 6/16/2026 | Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php. |