Vulnerabilities
Summary — last 7 days
New vulnerabilities5,375▲ 2,529 vs. last week
Critical / high3,002▲ 1,643 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)168▼ 38 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.1) | 0.44% | — | Martinstools Free & Easy Link Building | 11/27/2023 | 6/17/2026 | The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin | |
| Modified | Medium (4.6) | 0.45% | — | Renault Easy Link | 8/24/2023 | 6/17/2026 | A lack of exception handling in the Renault Easy Link Multimedia System Software Version 283C35519R allows attackers to cause a Denial of Service (DoS) via supplying crafted WMA files when connecting a device to the vehicle's USB plug and play feature. |