Vulnerabilities

Summary — last 7 days

New vulnerabilities3,237▲ 663 vs. last week
Critical / high1,519▲ 123 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)238▲ 224 vs. last week
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedHigh (7.5)1.5%—Pcxp Toppe CMS12/31/20056/16/2026
login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the target userid.
ModifiedMedium (5.8)1.2%—Pc-experienceToppe CMS12/31/20056/16/2026
Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.
Orbitaley — Vulnerabilities