Vulnerabilities
Summary — last 7 days
New vulnerabilities4,965▲ 164 vs. last week
Critical / high2,071▼ 686 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)804▲ 741 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (6.8) | 3.3% | Exploit | Stoverud Phphotoalbum | 4/27/2010 | 6/16/2026 | Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitrary code by uploading a file with a (1) .php.pgif or (2) .php.pjpeg double extension, then accessing it via a direct request to the file in albums/userpics/. | |
| Modified | High (7.5) | 1.0% | Exploit | Henning Stoverud Phphotoalbum | 5/29/2008 | 6/16/2026 | Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) album parameter to thumbnails.php and the (2) pid parameter to displayimage.php. |