Vulnerabilities

Summary — last 7 days

New vulnerabilities3,037▲ 502 vs. last week
Critical / high1,448▲ 249 vs. last week
New active exploitation (KEV)8▼ 2 vs. last week
Unscored (no CVSS)365▲ 158 vs. last week
–

7 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
DeferredCritical (9.3)0.40%—JetsmartfiltersAI6/26/20266/26/2026
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.3 versions.
DeferredCritical (9.3)0.40%—JetsmartfiltersAI6/17/20266/17/2026
Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions.
DeferredMedium (6.5)0.34%—Crocoblock JetsmartfiltersAI8/20/20256/17/2026
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Retrieve Embedded Sensitive Data.This issue affects JetSmartFilters: from n/a through <= 3.6.7.
DeferredMedium (6.5)0.17%—Crocoblock JetsmartfiltersAI7/16/20256/17/2026
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affects JetSmartFilters: from n/a through <= 3.6.8.
ModifiedHigh (10)3.9%—Mcafee Smartfilter Administration8/22/20126/16/2026
McAfee SmartFilter Administration, and SmartFilter Administration Bess Edition, before 4.2.1.01 does not require authentication for access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to execute arbitrary code via a crafted .war file.
ModifiedMedium (4.6)0.29%—Mcafee Smartfilter7/10/20096/16/2026
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
ModifiedMedium (4.6)0.29%—Mcafee Smartfilter7/2/20096/16/2026
SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.