Vulnerabilities
Summary — last 7 days
New vulnerabilities3,209▲ 241 vs. last week
Critical / high1,516▼ 30 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)102▼ 69 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | Low (1.3) | 0.46% | — | Buttercup | 8/16/2025 | 6/17/2026 | A vulnerability was found in Buttercup buttercup-browser-extension up to 0.14.2. Affected by this vulnerability is an unknown functionality of the component Vault Handler. The manipulation results in improper access controls. The attack may be performed from a remote location. A high complexity level is associated… | |
| Modified | Medium (5.3) | 0.47% | — | Perrymitchell Buttercup | 9/7/2023 | 6/17/2026 | Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/ | |
| Modified | Medium (4.3) | 1.5% | 💥 Exploit | Buttercup WFM | 6/6/2007 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitrary web script or HTML via the title parameter. |