Vulnerabilities
Summary — last 7 days
New vulnerabilities5,182▲ 2,097 vs. last week
Critical / high2,882▲ 1,386 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)179▼ 28 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (8.9) | 0.81% | — | Lfedge Ekuiper | 7/24/2025 | 6/17/2026 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute… | |
| Analyzed | Medium (5.4) | 0.30% | — | Lfedge Ekuiper | 5/14/2025 | 6/17/2026 | LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine. Prior to version 2.1.0 user with rights to modificate the service (e.g. kuiperUser role) can inject a cross-site scripting payload into Connection Configuration key `Name` (`confKey`) parameter. After this setup,… | |
| Deferred | Medium (5.4) | 0.35% | — | Lfedge EkuiperAI | 3/10/2025 | 6/17/2026 | LF Edge eKuiper is an internet-of-things data analytics and stream processing engine. Prior to version 2.0.8, auser with rights to modify the service (e.g. kuiperUser role) can inject a cross-site scripting payload into the rule `id` parameter. Then, after any user with access to this service (e.g. admin) tries make… | |
| Analyzed | High (8.8) | 0.89% | — | Lfedge Ekuiper | 8/20/2024 | 6/17/2026 | LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. A user could utilize and exploit SQL Injection to allow the execution of malicious SQL query via Get method in sqlKvStore. This vulnerability is fixed in 1.14.2. | |
| Modified | Medium (5.9) | 0.76% | — | Dfirkuiper Kuiper | 12/18/2023 | 6/17/2026 | A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function unzip_file of the file kuiper/app/controllers/case_management.py of the component TAR Archive Handler. The manipulation of the argument dst_path leads to path traversal. It is possible to initiate the… |