Vulnerabilities
Summary — last 7 days
New vulnerabilities3,346▲ 479 vs. last week
Critical / high1,535▲ 57 vs. last week
New active exploitation (KEV)6▲ 1 vs. last week
Unscored (no CVSS)177▲ 6 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.8) | 1.2% | — | Jonathon Freeman Ovbb | 12/31/2006 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in the GetLocation function in online.php in Jonathon J. Freeman OvBB 0.13a allows remote attackers to inject arbitrary web script or HTML via the aRequest variable. | |
| Modified | High (10) | 1.4% | — | Jonathon J. Freeman Ovbb | 11/8/2006 | 6/16/2026 | Multiple unspecified vulnerabilities in Jonathon J. Freeman OvBB before 0.13a have unknown impact and attack vectors. | |
| Modified | High (7.5) | 1.2% | 💥 Exploit | Ovbb | 11/30/2005 | 6/16/2026 | Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (1) threadid parameter to thread.php and (2) userid parameter to profile.php. NOTE: the vendor disputes these issues, saying "these reports are completely unsubstantial. |