Vulnerabilities
Summary — last 7 days
New vulnerabilities4,662▼ 636 vs. last week
Critical / high1,874▼ 1,177 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)733▲ 624 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (8.4) | 0.51% | — | RpycAI | 3/12/2024 | 6/17/2026 | In RPyC before 6.0.0, when a server exposes a method that calls the attribute named __array__ for a client-provided netref (e.g., np.array(client_netref)), a remote attacker can craft a class that results in remote code execution. | |
| Modified | High (7.5) | 13% | — | Rpyc Project Rpyc | 10/3/2019 | 6/17/2026 | In RPyC 4.1.x through 4.1.1, a remote attacker can dynamically modify object attributes to construct a remote procedure call that executes code for an RPyC service with default configuration settings. |