Vulnerabilities
Summary — last 7 days
New vulnerabilities3,204▲ 232 vs. last week
Critical / high1,514▼ 33 vs. last week
New active exploitation (KEV)5→ no change vs. last week
Unscored (no CVSS)102▼ 69 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | High (7.4) | 0.60% | — | Mozilla Zamboni | 11/4/2012 | 6/16/2026 | The contribution feature in Zamboni does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate, related to use of the Python urllib2… |