Vulnerabilities
Summary — last 7 days
New vulnerabilities3,229▲ 667 vs. last week
Critical / high1,519▲ 158 vs. last week
New active exploitation (KEV)5▼ 1 vs. last week
Unscored (no CVSS)241▲ 229 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.8) | 2.4% | — | Yate YET Another Telephony Engine | 5/17/2007 | 6/16/2026 | The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a denial of service (NULL dereference and application crash) via a Call-Info header without a purpose parameter. |