Vulnerabilities
Summary — last 7 days
New vulnerabilities4,560▼ 789 vs. last week
Critical / high1,778▼ 1,280 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)786▲ 691 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 0.89% | — | Larsga Duke | 7/28/2023 | 6/17/2026 | Duke v1.2 and below was discovered to contain a code injection vulnerability via the component no.priv.garshol.duke.server.CommonJTimer.init. | |
| Modified | Medium (5.5) | 0.24% | — | Huawei Bla-a09 FirmwareHuawei Bla-tl00b FirmwareHuawei Berkeley-l09 FirmwareHuawei Duke-l09 Firmware+9 | 9/11/2020 | 6/17/2026 | Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier… | |
| Analyzed | High (7.8) | 72% | ⚠ Active exploitationExploit | Google AndroidDebian LinuxCanonical Ubuntu LinuxNetapp Cloud Backup+73 | 10/11/2019 | 6/17/2026 | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing… | |
| Modified | Medium (6.8) | 0.33% | — | Huawei Duke-l09 Firmware | 2/15/2018 | 6/17/2026 | The 'Find Phone' function in some Huawei smart phones with software earlier than Duke-L09C10B186 versions, earlier than Duke-L09C432B187 versions, earlier than Duke-L09C636B186 versions has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may… |