Vulnerabilities
Summary — last 7 days
New vulnerabilities4,734▼ 628 vs. last week
Critical / high1,789▼ 1,270 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)951▲ 850 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 2.1% | Exploit | Xoops Glossaire Module | 6/2/2014 | 6/17/2026 | SQL injection vulnerability in glossaire-aff.php in the Glossaire module 1.0 for XOOPS allows remote attackers to execute arbitrary SQL commands via the lettre parameter. | |
| Modified | Medium (4.3) | 1.4% | Exploit | Davidbourrier Glossaire | 3/30/2009 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in glossaire.php in Glossaire 2.0 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | |
| Modified | High (7.5) | 1.0% | Exploit | Xoops Glossaire Module | 5/17/2007 | 6/16/2026 | SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the sid parameter in an ImprDef action. | |
| Modified | Medium (5.1) | 3.3% | Exploit | Xoops Glossaire Module | 7/6/2006 | 6/16/2026 | PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter. |