Vulnerabilities
Summary — last 7 days
New vulnerabilities3,215▲ 652 vs. last week
Critical / high1,508▲ 145 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)248▲ 236 vs. last week
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.6% | — | Grapixel NEW Media | 10/30/2018 | 6/17/2026 | Grapixel New Media v2.0 allows SQL Injection via the pages.aspx pageref parameter. | |
| Modified | Medium (6.1) | 1.4% | — | WOW NEW Media WOW Moodboard Lite | 5/17/2017 | 6/17/2026 | Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. | |
| Modified | Medium (5) | 1.7% | — | NEW Media Generation Hired Team Trial | 12/31/2004 | 6/16/2026 | Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (game interruption) via a malformed UDP packet sent to a game port, such as port 29200. | |
| Modified | High (7.5) | 1.1% | — | NEW Media Generation Hired Team Trial | 12/31/2004 | 6/16/2026 | Hired Team: Trial 2.0 and earlier and 2.200 does not limit how game players can kick other players off the server, including the administrator. | |
| Modified | Medium (5) | 1.7% | — | NEW Media Generation Hired Team Trial | 12/31/2004 | 6/16/2026 | Format string vulnerability in the game console in Hired Team: Trial 2.0 and earlier and 2.200 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a message. |