Vulnerabilities
Summary — last 7 days
New vulnerabilities5,380▲ 2,536 vs. last week
Critical / high2,999▲ 1,644 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Critical (9.8) | 1.2% | — | Debian Overkill | 10/31/2019 | 6/16/2026 | overkill has buffer overflow via long player names that can corrupt data on the server machine | |
| Modified | Medium (5) | 4.5% | 💥 Exploit | Overkill | 6/12/2006 | 6/16/2026 | Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daemon crash) via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function. | |
| Modified | Medium (4.3) | 1.4% | — | Cjoverkill | 12/31/2004 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in trade.php for CJOverkill 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) tms[0] or (2) url parameters. |