Vulnerabilities
Summary — last 7 days
New vulnerabilities4,653▼ 728 vs. last week
Critical / high1,752▼ 1,311 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)973▲ 874 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 0.54% | — | Weintek Easybuilder PRO | 11/6/2023 | 6/17/2026 | Weintek EasyBuilder Pro contains a vulnerability that, even when the private key is immediately deleted after the crash report transmission is finished, the private key is exposed to the public, which could result in obtaining remote control of the crash report server. | |
| Modified | High (7.8) | 22% | — | Weintek Easybuilder PRO | 2/22/2023 | 6/17/2026 | The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data. | |
| Modified | Medium (5.5) | 0.55% | — | Easybuild Project Easybuild | 3/19/2020 | 6/17/2026 | In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuild debug log files. This issue is fixed in EasyBuild v4.1.2, and in the `master`+ `develop` branches of the… |