Vulnerabilities
Summary — last 7 days
New vulnerabilities5,334▲ 1,788 vs. last week
Critical / high2,674▲ 961 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)755▲ 546 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 5.8% | — | Dozer Project Dozer | 12/29/2017 | 6/17/2026 | Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object. | |
| Modified | Critical (9.8) | 3.0% | 💥 Exploit | Jbuildozer | 12/27/2017 | 6/17/2026 | The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action. |