Vulnerabilities
Summary — last 7 days
New vulnerabilities4,679▼ 662 vs. last week
Critical / high1,855▼ 1,189 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
10 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.1) | 0.86% | — | Ammos Instrument Toolkit Binary Stream CaptureAINasa AIT CoreAI | 7/21/2026 | 7/23/2026 | The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (GDS), Electronic Ground Support Equipment (EGSE), commanding, telemetry uplink/downlink, and sequencing for instrument and CubeSat Missions. In… | |
| Analyzed | Critical (9.1) | 0.54% | — | Binary Datadog\ | 6/5/2026 | 6/17/2026 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The send_stats method does not remove newlines from metric names ($stat variable), allowing attackers to change the metric name… | |
| Analyzed | Critical (9.8) | 0.45% | — | Binary Datadog\ | 6/5/2026 | 6/17/2026 | DataDog::DogStatsd versions through 0.07 for Perl allow metric injections from event tags. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The format_event method (used by the event method) does not validate the content of the tags, which may contain… | |
| Analyzed | Critical (9.8) | 1.3% | — | Binary-husky GPT Academic | 1/23/2026 | 6/17/2026 | GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upload endpoint.… | |
| Analyzed | Critical (9.8) | 1.3% | — | Binary-husky GPT Academic | 1/23/2026 | 6/17/2026 | GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GPT Academic. Authentication is not required to exploit this vulnerability. The specific flaw exists… | |
| Deferred | Critical (9.3) | 0.54% | — | Binarycarpenter Launchpage.app ImporterAI | 12/16/2024 | 6/17/2026 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BinaryCarpenter LaunchPage.app Importer launchpage-app-importer allows SQL Injection.This issue affects LaunchPage.app Importer: from n/a through <= 1.1. | |
| Deferred | Critical (9.8) | 0.56% | — | Alexbinary Object-deep-assignAI | 6/17/2024 | 6/17/2026 | alexbinary object-deep-assign 1.0.11 is vulnerable to Prototype Pollution via the extend() method of Module.deepAssign (/src/index.js) | |
| Analyzed | Critical (9.8) | 1.2% | — | Binary-husky GPT Academic | 4/8/2024 | 6/17/2026 | GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable.… | |
| Modified | Critical (9.8) | 1.6% | — | Binaryops X-assign | 10/20/2021 | 6/17/2026 | This affects all versions of package x-assign. The global proto object can be polluted using the __proto__ object. | |
| Modified | Critical (9.8) | 2.0% | — | Mlmsoftwarez ADD Clicking MLM SoftwareMlmsoftwarez Autopool MLM SoftwareMlmsoftwarez Bidding MLM SoftwareMlmsoftwarez Binary MLM Software+6 | 5/24/2019 | 6/17/2026 | SQL injection exists in ADD Clicking MLM Software 1.0, Binary MLM Software 1.0, Level MLM Software 1.0, Singleleg MLM Software 1.0, Autopool MLM Software 1.0, Investment MLM Software 1.0, Bidding MLM Software 1.0, Moneyorder MLM Software 1.0, Repurchase MLM Software 1.0, and Gift MLM Software 1.0 via the… |