Vulnerabilities
Summary — last 7 days
New vulnerabilities4,656▼ 838 vs. last week
Critical / high1,753▼ 1,366 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)954▲ 855 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (5.3) | 0.26% | — | Phpoffice PhppresentationAI | 10/21/2026 | 10/22/2026 | PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generated HTML. Attackers can craft a PPTX with malicious text runs, hyperlink relationship targets, or shape descr attributes that are emitted… | |
| Awaiting Analysis | Critical (9.2) | 0.48% | — | Phpoffice PhppresentationAI | 10/21/2026 | 10/22/2026 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted presentation file. Attackers can upload a ZIP containing PhpPresentation.xml that IOFactory::load passes to unserialize(), enabling gadget-chain… |