Vulnerabilities
Summary — last 7 days
New vulnerabilities5,048▲ 1,807 vs. last week
Critical / high2,825▲ 1,268 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)172▼ 36 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.1) | 3.2% | — | Linux KernelAvaya 96x1 IP Deskphone Firmware | 5/17/2012 | 6/16/2026 | The udp6_ufo_fragment function in net/ipv6/udp.c in the Linux kernel before 2.6.39, when a certain UDP Fragmentation Offload (UFO) configuration is enabled, allows remote attackers to cause a denial of service (system crash) by sending fragmented IPv6 UDP packets to a bridge device. | |
| Modified | Medium (4.6) | 0.34% | — | Kphone | 5/18/2006 | 6/16/2026 | kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords. | |
| Modified | Medium (5) | 4.1% | 💥 Exploit | Wirlab Kphone | 12/31/2004 | 6/16/2026 | sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN response packet with a large attrLen value that causes an out-of-bounds read. |