Vulnerabilities

Summary — last 7 days

New vulnerabilities2,737▼ 486 vs. last week
Critical / high1,302▼ 188 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)227▼ 275 vs. last week
–

1 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ModifiedCritical (9.8)1.6%—Rainmachine Mini-8 FirmwareRainmachine Touch HD 12 Firmware11/1/20186/17/2026
An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application allowing an unauthenticated attacker to perform authenticated actions on the device via a 127.0.0.1:port value in the HTTP 'Host' header, as demonstrated by retrieving credentials.