Vulnerabilities
Summary — last 7 days
New vulnerabilities5,340▲ 2,469 vs. last week
Critical / high2,975▲ 1,601 vs. last week
New active exploitation (KEV)9▲ 3 vs. last week
Unscored (no CVSS)180▼ 26 vs. last week
29 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.15% | — | Bracketweb TreckAI | 10/9/2026 | 10/9/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck treck allows Reflected XSS.This issue affects Treck: from n/a through 1.0.0. | |
| Deferred | Critical (9.8) | 0.48% | — | Wasiliy Strecker Contest Gallery PROAI | 6/1/2026 | 7/22/2026 | Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation. This issue affects Contest Gallery Pro: from n/a through 29.0.1. | |
| Deferred | Critical (9.8) | 0.42% | — | Wasiliy Strecker Contest GalleryAI | 3/25/2026 | 6/17/2026 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Authentication Abuse.This issue affects Contest Gallery: from n/a through <= 28.1.2.2. | |
| Deferred | Medium (6.4) | 0.16% | — | Wasiliy Strecker Contest GalleryAI | 3/25/2026 | 6/17/2026 | Server-Side Request Forgery (SSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Server Side Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.1.2.1. | |
| Deferred | Medium (4.3) | 0.12% | 💥 PoC | Wasiliy Strecker Contest GalleryAI | 11/6/2025 | 10/7/2026 | Cross-Site Request Forgery (CSRF) vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery contest-gallery allows Cross Site Request Forgery.This issue affects Contest Gallery: from n/a through <= 28.0.0. | |
| Modified | High (7.1) | 0.81% | — | Treck Ipv6 | 12/22/2020 | 6/17/2026 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access. | |
| Modified | High (7.3) | 1.5% | — | Treck Ipv6 | 12/22/2020 | 6/17/2026 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauthenticated remote attacker to cause an Out of Bounds Write, and possibly a Denial of Service via network access. | |
| Modified | Medium (5.3) | 1.7% | — | Treck Ipv6 | 12/22/2020 | 6/17/2026 | An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access. | |
| Modified | Critical (9.8) | 3.5% | — | Treck Tcp/ip | 12/22/2020 | 6/17/2026 | A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code. | |
| Modified | Medium (4.3) | 1.7% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read. | |
| Modified | Medium (5.3) | 3.3% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. | |
| Modified | Medium (5.3) | 4.5% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read. | |
| Modified | Medium (5.3) | 3.1% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control. | |
| Modified | Medium (5.3) | 11% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read. | |
| Modified | Medium (5.3) | 3.6% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow. | |
| Modified | Medium (4.3) | 1.9% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP. | |
| Modified | Medium (6.3) | 2.0% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP. | |
| Modified | Medium (6.3) | 2.0% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow. | |
| Modified | Medium (6.5) | 2.0% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read. | |
| Modified | High (7.3) | 3.2% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write. | |
| Modified | Medium (6.5) | 2.1% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read. | |
| Modified | High (7.3) | 9.3% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read. | |
| Modified | Critical (9) | 21% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response. | |
| Modified | High (8.2) | 13% | — | Treck Tcp/ip | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free. | |
| Analyzed | Medium (5.4) | 18% | ⚠ Active exploitation | Treck Tcp/ipDell Wyse 5050 All-in-one FirmwareDell Wyse 7030 FirmwareDell Wyse 5030 Firmware | 6/17/2020 | 6/17/2026 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read. |