Vulnerabilities
Summary — last 7 days
New vulnerabilities5,490▲ 2,274 vs. last week
Critical / high2,822▲ 1,277 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)611▲ 402 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.47% | — | K-link K-box | 2/14/2022 | 6/17/2026 | K-Box is a web-based application to manage documents, images, videos and geodata. Prior to version 0.33.1, a stored Cross-Site-Scripting (XSS) vulnerability is present in the markdown editor used by the document abstract and markdown file preview. A specifically crafted anchor link can, if clicked, execute untrusted… |