Vulnerabilities
Summary — last 7 days
New vulnerabilities4,611▼ 511 vs. last week
Critical / high1,826▼ 1,072 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)865▲ 767 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Medium (6.5) | 0.36% | — | Jasonpancake Hover Video PreviewAI | 11/19/2024 | 6/17/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jasonpancake Hover Video Preview hover-video-preview allows Stored XSS.This issue affects Hover Video Preview: from n/a through <= 1.0.2. | |
| Modified | Critical (9.8) | 1.7% | — | Pancakeapp Pancake | 9/3/2020 | 6/17/2026 | Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation. | |
| Modified | High (7.5) | 1.5% | — | Pancake Zina | 5/28/2008 | 6/16/2026 | Directory traversal vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to have an unknown impact via a .. (dot dot) in the p parameter. | |
| Modified | Medium (4.3) | 1.0% | — | Pancake Zina | 5/28/2008 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in index.php in Zina 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via the l parameter. | |
| Modified | High (10) | 1.6% | — | Pancake.org Zina | 1/18/2007 | 6/16/2026 | Multiple unspecified vulnerabilities in Zina 1.0rc1 and earlier have unknown impact and attack vectors related to "Potential security bugs." |