Vulnerabilities
Summary — last 7 days
New vulnerabilities2,544▼ 345 vs. last week
Critical / high1,339▲ 68 vs. last week
New active exploitation (KEV)5▼ 7 vs. last week
Unscored (no CVSS)62▼ 466 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5) | 2.5% | — | Habariproject Habari | 12/29/2010 | 6/16/2026 | Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in system/admin/, which reveals the installation path in an error message. | |
| Modified | Low (2.6) | 1.6% | — | Habariproject Habari | 12/29/2010 | 6/16/2026 | Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) additem_form parameter to system/admin/dash_additem.php and the (2) status_data[] parameter to system/admin/dash_status.php. NOTE: some of… | |
| Modified | Medium (4.3) | 3.0% | — | Habari CMS | 10/18/2008 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the habari_username parameter. |