Vulnerabilities

Summary — last 7 days

New vulnerabilities4,800▲ 1,985 vs. last week
Critical / high2,645▲ 1,245 vs. last week
New active exploitation (KEV)7▲ 3 vs. last week
Unscored (no CVSS)218▲ 46 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedMedium (5.8)0.95%—Canonical Telepathy-idleCanonical Ubuntu Linux5/21/20136/16/2026
telepathy-idle before 0.1.15 does not verify (1) that the issuer is a trusted CA, (2) that the server hostname matches a domain name in the subject's Common Name (CN), or (3) the expiration date of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
Orbitaley — Vulnerabilities