Vulnerabilities

Summary — last 7 days

New vulnerabilities3,201▲ 620 vs. last week
Critical / high1,507▲ 108 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)236▲ 222 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)1.1%—Drupal Mailhandler9/24/20086/16/2026
SQL injection vulnerability in the Mailhandler module 5.x before 5.x-1.4 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to composing queries without using the Drupal database API.
Orbitaley — Vulnerabilities