search
CWE-79
Trends
- 1Scoreboard (UK) flagged for unpatched cross-site scripting flaw●Scoreboard (UK) carries a C trust score with 100% of its 1 CVE unpatched, a CVSS 6.4 XSS (CWE-79). No KEV, but unpatched
UK-based vendor Scoreboard has received a C trust score after leaving its only known vulnerability unpatched, a cross-site scripting flaw (CWE-79) rated CVSS 6.4. The bug does not appear on the KEV exploited-vulnerabilities list, but commentators stress the software remains exposed. Security observers are urging organisations to review whether they use the product and assess their exposure.
- 2Gravitl flags high-severity hardcoded credential flaw●Gravitl carries a single high-severity CVE at CVSS 7.5, a hardcoded credential flaw (CWE-798), with 0% unpatched and no
A security assessment of Gravitl, the networking software behind Netmaker, reports a single high-severity vulnerability with a CVSS score of 7.5: a hardcoded credential flaw classified as CWE-798. The report notes that no instances remain unpatched and the flaw has not appeared in the CISA Known Exploited Vulnerabilities catalog, calling the vendor's record otherwise clean.