Vulnerabilities
Summary — last 7 days
New vulnerabilities3,087▲ 28 vs. last week
Critical / high1,415▼ 130 vs. last week
New active exploitation (KEV)6▲ 1 vs. last week
Unscored (no CVSS)164▼ 8 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 1.3% | — | Jaba Xpress | 3/2/2020 | 6/17/2026 | An issue was discovered in JABA XPress Online Shop through 2018-09-14. It contains an arbitrary file upload vulnerability in the picture-upload feature of ProductEdit.aspx. An authenticated attacker may bypass the frontend filename validation and upload an arbitrary file via FileUploader.aspx.cs in FileUploader.aspx… |