Vulnerabilities
Summary — last 7 days
New vulnerabilities5,448▲ 2,193 vs. last week
Critical / high2,814▲ 1,257 vs. last week
New active exploitation (KEV)9▲ 4 vs. last week
Unscored (no CVSS)610▲ 400 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.5) | 1.8% | — | Fujitsu Esprimo D556/2 FirmwareFujitsu Esprimo D6011 FirmwareFujitsu Esprimo D6012 FirmwareFujitsu Esprimo D7010 Firmware+183 | 12/7/2023 | 6/17/2026 | A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address during the DXE phase of… | |
| Modified | High (8.8) | 0.26% | — | Stylist Project Stylist | 5/22/2023 | 6/17/2026 | Cross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <= 0.2.6 versions. |