Vulnerabilities
Summary — last 7 days
New vulnerabilities5,087▲ 1,574 vs. last week
Critical / high2,548▲ 866 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)720▲ 653 vs. last week
More filters
7 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.1) | 5.2% | — | Vault-cli Project Vault-cli | 12/16/2021 | 6/17/2026 | vault-cli is a configurable command-line interface tool (and python library) to interact with Hashicorp Vault. In versions before 3.0.0 vault-cli features the ability for rendering templated values. When a secret starts with the prefix `!template!`, vault-cli interprets the rest of the contents of the secret as a… | |
| Modified | High (7.5) | 2.0% | — | Fast-http-cli Project Fast-http-cli | 6/7/2018 | 6/17/2026 | fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. | |
| Modified | High (7.5) | 1.2% | — | Babelcli Project Babelcli | 6/7/2018 | 6/17/2026 | babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. | |
| Modified | High (7.5) | 1.1% | — | Gruntcli Project Gruntcli | 6/7/2018 | 6/17/2026 | gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. | |
| Modified | Medium (5.9) | 0.52% | — | Cobalt-cli Project Cobalt-cli | 6/1/2018 | 6/17/2026 | cobalt-cli downloads resources over HTTP, which leaves it vulnerable to MITM attacks. | |
| Modified | Low (3.5) | 0.98% | — | CLI Project CLIDebian Linux | 5/31/2018 | 6/17/2026 | The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to. | |
| Modified | High (7.8) | 0.55% | — | Point-cli Project Point-cli | 1/10/2018 | 6/17/2026 | lib/commands/setup.rb in the point-cli gem 0.0.1 for Ruby places credentials on the curl command line, which allows local users to obtain sensitive information by listing the process. |