Vulnerabilities
Summary — last 7 days
New vulnerabilities4,653▼ 728 vs. last week
Critical / high1,752▼ 1,311 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.2% | — | Kuerp Project Kuerp | 1/29/2024 | 6/17/2026 | A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function del_sn_db of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. The exploit has been… | |
| Modified | Critical (9.8) | 0.98% | — | Kuerp Project Kuerp | 1/29/2024 | 6/17/2026 | A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument App_User_id/App_user_Token leads to improper authentication. The exploit has been… | |
| Modified | Critical (9.8) | 0.87% | — | Kuerp Project Kuerp | 1/29/2024 | 6/17/2026 | A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The identifier of this… |