Vulnerabilities
Summary — last 7 days
New vulnerabilities3,187▲ 591 vs. last week
Critical / high1,502▲ 108 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)241▲ 227 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.4% | — | Treasuryxpress C2box | 1/23/2017 | 6/17/2026 | B.A.S C2Box before 4.0.0 (r19171) relies on client-side validation, which allows remote attackers to "corrupt the business logic" via a negative value in an overdraft. | |
| Modified | Medium (6.8) | 2.7% | 💥 Exploit | Boxautomation C2box | 7/16/2015 | 6/17/2026 | Cross-site request forgery (CSRF) vulnerability in SecuritySetting/UserSecurity/UserManagement.aspx in B.A.S C2Box before 4.0.0 (r19171) allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via certain vectors. |