Vulnerabilities

Summary — last 7 days

New vulnerabilities3,322▼ 1,446 vs. last week
Critical / high1,069▼ 920 vs. last week
New active exploitation (KEV)6▼ 3 vs. last week
Unscored (no CVSS)1,088▲ 423 vs. last week
More filters
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (6.1)13%PoCOlimpoks Olimpok10/16/20206/17/2026
OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS. Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of targeted application and…