Vulnerabilities

Summary — last 7 days

New vulnerabilities3,316▼ 1,093 vs. last week
Critical / high1,295▼ 635 vs. last week
New active exploitation (KEV)6→ no change vs. last week
Unscored (no CVSS)805▲ 362 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)2.7%ExploitRausoft Id.prove9/27/20186/16/2026
An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.