Vulnerabilities
Summary — last 7 days
New vulnerabilities4,984▲ 127 vs. last week
Critical / high2,132▼ 643 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)773▲ 710 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (8.8) | 18% | — | Spitfire Project Spitfire | 1/10/2023 | 6/17/2026 | A PHP Object Injection vulnerability in the unserialize() function Spitfire CMS v1.0.475 allows authenticated attackers to execute arbitrary code via sending crafted requests to the web application. | |
| Modified | Medium (4.3) | 0.97% | — | Clausmuus Spitfire | 1/1/2015 | 6/16/2026 | Cross-site scripting (XSS) vulnerability in Spitfire CMS 1.0.436 allows remote attackers to inject arbitrary web script or HTML via a cms_username cookie. |