Vulnerabilities
Summary — last 7 days
New vulnerabilities4,660▼ 636 vs. last week
Critical / high1,873▼ 1,176 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)733▲ 624 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.8) | 0.36% | PoC | Veryfitpro Project Veryfitpro | 4/25/2022 | 7/9/2026 | VeryFitPro (com.veryfit2hr.second) 3.2.8 hashes the account's password locally on the device and uses the hash to authenticate in all communication with the backend API, including login, registration and changing of passwords. This allows an attacker in possession of a hash to takeover a user's account, rendering the… | |
| Modified | High (8.1) | 1.1% | — | I-doo Veryfitpro | 6/16/2021 | 6/17/2026 | The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing. |