Vulnerabilities
Summary — last 7 days
New vulnerabilities4,625▼ 755 vs. last week
Critical / high1,827▼ 1,239 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.8) | 0.34% | — | Matrimony Website Script M-plusAI | 3/24/2026 | 6/17/2026 | Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various POST parameters. Attackers can inject malicious SQL payloads into parameters like txtGender, religion, Fage, and cboCountry across… | |
| Analyzed | High (8.8) | 0.33% | — | Zeeways Matrimony CMS | 3/24/2026 | 6/17/2026 | Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint. Attackers can inject SQL code via the up_cast, s_mother, and s_religion parameters to extract sensitive database information using time-based or… | |
| Analyzed | Critical (9.8) | 0.74% | — | Abeltechsoft Chavara Matrimony | 7/25/2025 | 6/17/2026 | An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request. | |
| Modified | Critical (9.8) | 1.3% | — | Matrimony Project Matrimony | 4/5/2022 | 6/17/2026 | Matrimony v1.0 was discovered to contain a SQL injection vulnerability via the Password parameter. |