Vulnerabilities

Summary — last 7 days

New vulnerabilities2,737▼ 486 vs. last week
Critical / high1,302▼ 188 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)227▼ 275 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedLow (3.5)0.94%—Nodeauthor Project Nodeauthor4/21/20156/17/2026
Cross-site scripting (XSS) vulnerability in the nodeauthor module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a Profile2 field in a provided block.