Vulnerabilities
Summary — last 7 days
New vulnerabilities4,684▼ 604 vs. last week
Critical / high1,871▼ 1,180 vs. last week
New active exploitation (KEV)8▲ 1 vs. last week
Unscored (no CVSS)746▲ 637 vs. last week
More filters
5 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Deferred | High (7.1) | 0.49% | — | Wapt ServerAI | 8/31/2026 | 9/8/2026 | WAPT Server versions 2.6.1.17834 and earlier contains a SQL injection vulnerability in the `columns` parameter of the GET `/api/v3/hosts` endpoint. A remote authenticated user with read-only privileges can inject arbitrary PostgreSQL expressions into the SQL query constructed by WAPT. By exploiting the injection… | |
| Deferred | Critical (10) | 0.71% | — | Wapt ServerAI | 8/3/2026 | 9/1/2026 | A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated attacker to bypass security restriction using a specially crafted packet and retrieve a valid session token for the targeted account. | |
| Modified | High (7.8) | 0.26% | — | Tranquil Wapt | 8/16/2021 | 6/17/2026 | Incorrect Access Control in Tranquil WAPT Enterprise - before 1.8.2.7373 and before 2.0.0.9450 allows guest OS users to escalate privileges via WAPT Agent. | |
| Modified | High (7.5) | 1.0% | — | Airswaptoken Project Airswaptoken | 7/5/2018 | 6/17/2026 | The sellBuyerTokens function of a smart contract implementation for SwapToken, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets. | |
| Modified | High (7.5) | 0.88% | — | Javaswaptest Project Javaswaptest | 7/4/2018 | 6/17/2026 | The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow. |