Vulnerabilities
Summary — last 7 days
New vulnerabilities4,656▼ 838 vs. last week
Critical / high1,753▼ 1,366 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)954▲ 855 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (8.7) | 0.43% | — | Coder Code-marketplace | 4/6/2026 | 7/24/2026 | The Code Extension Marketplace is an open-source alternative to the VS Code Marketplace. Prior to 2.4.2, Zip Slip vulnerability in coder/code-marketplace allowed a malicious VSIX file to write arbitrary files outside the extension directory. ExtractZip passed raw zip entry names to a callback that wrote files via… | |
| Modified | Medium (4.3) | 1.5% | Exploit | NT BBS E-market | 9/10/2009 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in becommunity/community/index.php in NTSOFT BBS E-Market Professional allow remote attackers to inject arbitrary web script or HTML via the (1) page, (2) bt_code, and (3) b_no parameters in a board view action. | |
| Modified | High (7.5) | 8.4% | Exploit | BBS E-market | 7/21/2007 | 6/16/2026 | PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code via a URL in the p_mode parameter. |