Vulnerabilities
Summary — last 7 days
New vulnerabilities5,111▲ 1,636 vs. last week
Critical / high2,574▲ 901 vs. last week
New active exploitation (KEV)7→ no change vs. last week
Unscored (no CVSS)736▲ 669 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.17% | — | RIK Schennink SnippyAI | 1/22/2025 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Rik Schennink Snippy snippy allows Reflected XSS.This issue affects Snippy: from n/a through <= 1.4.1. | |
| Modified | High (7.8) | 1.1% | — | Taoensso Nippy | 9/11/2020 | 6/17/2026 | A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker to create a malicious payload that, when deserialized, will allow arbitrary code to be executed. This occurs because there is automatic use of the Java Serializable interface. |