Vulnerabilities
Summary — last 7 days
New vulnerabilities5,367▲ 2,520 vs. last week
Critical / high2,990▲ 1,628 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.26% | — | Grey Opaque Project Grey Opaque | 6/22/2024 | 6/17/2026 | The Grey Opaque theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Download-Button shortcode in all versions up to, and including, 2.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with… | |
| Modified | High (7.5) | 1.4% | — | Ucbrise Opaque | 1/24/2019 | 6/17/2026 | An issue was discovered in UC Berkeley RISE Opaque before 2018-12-01. There is no boundary check on ocall_malloc. The return value could be a pointer to enclave memory. It could cause an arbitrary enclave memory write. |