Vulnerabilities
Summary — last 7 days
New vulnerabilities4,845▲ 1,833 vs. last week
Critical / high2,656▲ 1,139 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)250▲ 80 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.64% | — | Periscopeholdings Buyspeed | 4/10/2020 | 6/17/2026 | Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript is subsequently displayed by the application without sanitization and is executed in the browser of the user, which could… |