Vulnerabilities
Summary — last 7 days
New vulnerabilities5,297▲ 1,737 vs. last week
Critical / high2,660▲ 935 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)710▲ 501 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.8) | 0.42% | — | Perl DBIAIPerl DBD DBMAIPerl MldbmAIPerl DBD GoferAI | 9/19/2026 | 9/22/2026 | DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM. DBD::DBM passes the dbm_type and dbm_mldbm connect attributes to require without checking that the value names a module. require treats a path-shaped string as a literal filename and does not… | |
| Modified | Medium (4.4) | 0.27% | — | Gofer Project Gofer | 5/4/2018 | 6/16/2026 | gofer before 0.68 uses world-writable permissions for /var/lib/gofer/journal/watchdog, which allows local users to cause a denial of service by removing journal entries. |