Vulnerabilities
Summary — last 7 days
New vulnerabilities5,004▲ 140 vs. last week
Critical / high2,117▼ 662 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)818▲ 755 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.2% | — | Bonanza Wealth Management System | 5/9/2022 | 6/17/2026 | Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component. |