Vulnerabilities
Summary — last 7 days
New vulnerabilities2,736▼ 336 vs. last week
Critical / high1,272▼ 222 vs. last week
New active exploitation (KEV)8→ no change vs. last week
Unscored (no CVSS)213▼ 108 vs. last week
3 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (4.3) | 1.5% | 💥 Exploit | Phpdirectorysource | 3/10/2010 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to inject arbitrary web script or HTML via the st parameter. | |
| Modified | High (7.5) | 0.99% | 💥 Exploit | Phpdirectorysource | 3/10/2010 | 6/16/2026 | SQL injection vulnerability in search.php in phpDirectorySource 1.x allows remote attackers to execute arbitrary SQL commands via the st parameter. | |
| Modified | Medium (6.8) | 1.1% | 💥 Exploit | PHP Directory Source Phpdirectorysource | 5/13/2008 | 6/16/2026 | Multiple SQL injection vulnerabilities in phpDirectorySource 1.1.06, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to show.php and the (2) login parameter to admin.php. |