Vulnerabilities
Summary — last 7 days
New vulnerabilities4,684▼ 604 vs. last week
Critical / high1,871▼ 1,180 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)746▲ 637 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (10) | 2.4% | — | Microsoft Onefuzz | 8/13/2021 | 6/17/2026 | OneFuzz is an open source self-hosted Fuzzing-As-A-Service platform. Starting with OneFuzz 2.12.0 or greater, an incomplete authorization check allows an authenticated user from any Azure Active Directory tenant to make authorized API calls to a vulnerable OneFuzz instance. To be vulnerable, a OneFuzz deployment must… |