Vulnerabilities
Summary — last 7 days
New vulnerabilities3,527▼ 1,287 vs. last week
Critical / high1,365▼ 1,397 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)710▲ 647 vs. last week
More filters
4 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | Critical (9.1) | 0.58% | — | Moonrailgun TianjiAI | 10/15/2026 | 10/16/2026 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in src/server/utils/template.ts passes survey feedTemplate and monitor notification templates to lodash template(), while the default evaluate pattern remains enabled. A workspace administrator can store… | |
| Deferred | High (8.8) | 0.34% | — | TianjiAI | 10/15/2026 | 10/16/2026 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without parameter binding. The timezone value can reach affected analytics… | |
| Deferred | Medium (6.5) | 0.32% | — | Tianjin Xiaowu Information Technology CO LTD Beike Holdings IOSAI | 1/27/2025 | 6/17/2026 | An issue in Tianjin Xiaowu Information technology Co., Ltd BeiKe Holdings iOS 1.3.50 allows attackers to access sensitive user information via supplying a crafted link. | |
| Modified | High (7.5) | 0.83% | — | Tianjie Cpe906-3Tianjie Cpe906-3 Firmware | 2/16/2023 | 6/17/2026 | TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513. |