Vulnerabilities
Summary — last 7 days
New vulnerabilities5,222▲ 2,437 vs. last week
Critical / high2,945▲ 1,602 vs. last week
New active exploitation (KEV)6▼ 2 vs. last week
Unscored (no CVSS)223▲ 49 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 2.0% | — | Zjjserver Project Zjjserver | 6/7/2018 | 6/17/2026 | zjjserver is a static file server. zjjserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. | |
| Modified | Low (2.1) | 0.58% | — | Apache Jserv | 10/5/2011 | 6/16/2026 | The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ URI. |