Vulnerabilities
Summary — last 7 days
New vulnerabilities5,374▲ 2,608 vs. last week
Critical / high3,003▲ 1,691 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)189▼ 11 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.5) | 1.4% | — | Naviserver Project Naviserver | 5/16/2020 | 6/17/2026 | NaviServer 4.99.4 to 4.99.19 allows denial of service due to the nsd/driver.c ChunkedDecode function not properly validating the length of a chunk. A remote attacker can craft a chunked-transfer request that will result in a negative value being passed to memmove via the size parameter, causing the process to crash. |