Vulnerabilities
Summary — last 7 days
New vulnerabilities3,198▲ 619 vs. last week
Critical / high1,503▲ 126 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)243▲ 229 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 14% | 💥 Exploit | Siemens Db4web | 4/22/2003 | 6/16/2026 | DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (port scan) via a request for a URL that specifies the target IP address and port, which produces a connection status in the resulting error message. | |
| Modified | Medium (5) | 8.5% | 💥 Exploit | Db4web | 4/22/2003 | 6/16/2026 | db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot). |