Vulnerabilities
Summary — last 7 days
New vulnerabilities4,625▼ 547 vs. last week
Critical / high1,829▼ 1,114 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)865▲ 767 vs. last week
More filters
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.37% | — | Fomopay Fomo PAY Chinese Payment SolutionAIFomopay Fomo-payment-gateway-for-woocommerceAI | 3/26/2025 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fomopay FOMO Pay Chinese Payment Solution fomo-payment-gateway-for-woocommerce allows Reflected XSS.This issue affects FOMO Pay Chinese Payment Solution: from n/a through <= 2.0.4. | |
| Modified | Medium (5.5) | 0.23% | — | BD Pyxis Anesthesia Station ES FirmwareBD Pyxis Anesthesia Station 4000 FirmwareBD Pyxis Cato FirmwareBD Pyxis Ciisafe Firmware+20 | 2/11/2022 | 6/17/2026 | Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic protected health… | |
| Modified | Critical (9.8) | 1.7% | — | Mopa Project Mopa | 12/27/2021 | 6/17/2026 | An issue was discovered in the mopa crate through 2021-06-01 for Rust. It incorrectly relies on Trait memory layout, possibly leading to future occurrences of arbitrary code execution or ASLR bypass. |