Vulnerabilities
Summary — last 7 days
New vulnerabilities5,032▲ 199 vs. last week
Critical / high2,142▼ 632 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)773▲ 710 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 0.61% | — | Oneapp Project Oneapp | 2/20/2023 | 6/16/2026 | A vulnerability, which was classified as critical, has been found in uakfdotb oneapp. This issue affects some unknown processing. The manipulation leads to sql injection. The attack may be initiated remotely. This product does not use versioning. This is why information about affected and unaffected releases are… | |
| Modified | Medium (5.4) | 0.27% | — | Wephoneapp Wephone - Phone Calls VS Skype | 10/2/2014 | 6/17/2026 | The WePhone - phone calls vs skype (aka com.wephoneapp) application 1.03.00 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |