Vulnerabilities
Summary — last 7 days
New vulnerabilities4,725▼ 599 vs. last week
Critical / high1,822▼ 1,261 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)827▲ 715 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 6.7% | — | Alienform2 Project Alienform2 | 4/1/2020 | 6/17/2026 | Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002-0934. An unauthenticated, remote attacker can exploit this via a series of crafted requests. | |
| Modified | Medium (6.4) | 2.0% | — | JON Hedley Alienform2 | 10/4/2002 | 6/16/2026 | Directory traversal vulnerability in Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) allows remote attackers to read or modify arbitrary files via an illegal character in the middle of a .. (dot dot) sequence in the parameters (1) _browser_out or (2) _out_file. |