Vulnerabilities
Summary — last 7 days
New vulnerabilities4,707▼ 595 vs. last week
Critical / high1,807▼ 1,277 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)826▲ 713 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.3) | 1.3% | — | Mdweb Project Mdweb | 7/11/2022 | 6/17/2026 | The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. | |
| Modified | High (7.5) | 2.8% | Exploit | Mdweb | 10/27/2006 | 6/16/2026 | Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers to execute arbitrary PHP code via a URL in the chemin_appli parameter in (1) admin/inc/organisations/form_org.inc.php and (2) admin/inc/organisations/country_insert.php. |