Vulnerabilities

Summary — last 7 days

New vulnerabilities2,683▼ 54 vs. last week

Critical / high1,442▲ 305 vs. last week

New active exploitation (KEV)7▼ 3 vs. last week

Unscored (no CVSS)64▼ 462 vs. last week

5 results, sorted by published date (most recent first)

CVE	Status	Severity	EPSS	Active exploitation	Affected technologies	Published ▼	Modified	Description
CVE-2016-5285	Modified	High (7.5)	2.3%	—	Mozilla NSS Debian Linux Redhat Enterprise Linux Suse Linux Enterprise Server+23	11/15/2019	6/17/2026	A Null pointer dereference vulnerability exists in Mozilla Network Security Services due to a missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime, which could let a remote malicious user cause a Denial of Service.
CVE-2019-7006	Modified	Medium (5.5)	0.28%	—	Avaya One-x Communicator	2/27/2019	6/17/2026	Avaya one-X Communicator uses weak cryptographic algorithms in the client authentication component that could allow a local attacker to decrypt sensitive information. Affected versions include all 6.2.x versions prior to 6.2 SP13.
CVE-2008-6140	Modified	Medium (5)	1.4%	—	Avaya One-x	2/14/2009	6/16/2026	Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Avaya one-X Desktop Edition 2.1.0.78 allows remote attackers to cause a denial of service (crash) via unspecified vectors.
CVE-2007-3317	Modified	High (7.8)	1.9%	—	Avaya One-x	6/21/2007	6/16/2026	The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service (device crash) via a malformed SIP message.
CVE-2007-3318	Modified	Medium (5)	1.9%	—	Avaya One-x	6/21/2007	6/16/2026	Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier allows remote attackers to cause a denial of service (call reception outage) via a malformed SIP message.