Vulnerabilities
Summary — last 7 days
New vulnerabilities4,924▲ 15 vs. last week
Critical / high2,111▼ 666 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)734▲ 626 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.15% | — | Davidfcarr My-marginaliaAI | 4/17/2025 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in davidfcarr My Marginalia my-marginalia allows Stored XSS.This issue affects My Marginalia: from n/a through <= 1.0.6. | |
| Modified | Critical (9.8) | 1.4% | — | Marginalia Project Marginalia | 7/24/2019 | 6/17/2026 | marginalia < 1.6 is affected by: SQL Injection. The impact is: The impact is a injection of any SQL queries when a user controller argument is added as a component. The component is: Affects users that add a component that is user controller, for instance a parameter or a header. The attack vector is: Hacker inputs a… |