Unknown CNA (74b3a70d...)
First CVE: Mar 25, 2025Active for: 1 year
9
CVEs Published
More CVEs Published than 25% of tracked CNAs
4.5
Avg CVEs / Year
More Avg CVEs / Year than 30% of tracked CNAs
7.9
Avg CVSS Score
Higher Avg CVSS Score than 84% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published by Unknown CNA (74b3a70d...) over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 25, 2025
16 months ago
Most Recent CVE
Jul 14, 2026
14 days ago
Top CVEs
All CVEs published by Unknown CNA (74b3a70d...) as a CNA, regardless of affected vendor or product.
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-15720HIGH In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service. | Jul 14, 2026 | 8.6 | 36 | NO | NO |
CVE-2026-40470CRITICAL A critical XSS vulnerability affected hackage-server and
hackage.haskell.org. HTML and JavaScript files provided in source
packages or via the documentation upload facility were s | Apr 23, 2026 | 9.9 | 30 | NO | NO |
CVE-2026-40472CRITICAL In hackage-server, user-controlled metadata from .cabal files are rendered into HTML
href attributes without proper sanitization, enabling stored
Cross-Site Scripting (XSS) attacks | Apr 23, 2026 | 9.9 | 29 | NO | NO |
CVE-2026-40471CRITICAL hackage-server lacked Cross-Site Request Forgery (CSRF) protection across its endpoints. Scripts on foreign sites could trigger requests to hackage server, possibly abusing latent | Apr 23, 2026 | 9.6 | 28 | NO | NO |
CVE-2026-1616HIGH The $uri$args concatenation in nginx configuration file present in Open Security Issue Management (OSIM) prior v2025.9.0 allows path traversal attacks via query parameters. | Jan 29, 2026 | 7.5 | 25 | NO | NO |
CVE-2025-31164MEDIUM heap-buffer overflow in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via create_line_with_spline. | Mar 28, 2025 | 6.6 | 20 | NO | NO |
CVE-2025-31163MEDIUM Segmentation fault in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via put_patternarc function. | Mar 28, 2025 | 6.6 | 20 | NO | NO |
CVE-2025-31162MEDIUM Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. | Mar 28, 2025 | 6.6 | 20 | NO | NO |
CVE-2025-2312MEDIUM A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containeri | Mar 25, 2025 | 5.9 | 20 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA9 CVEs
44%
22%
33%
Severity distribution among all CVEs353,240 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local4 (44.4%)
Network5 (55.6%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (88.9%)
High1 (11.1%)
Unknown0 (0.0%)
User Interaction
None8 (88.9%)
Unknown0 (0.0%)
Required1 (11.1%)
Privileges Required
Low5 (55.6%)
High0 (0.0%)
None4 (44.4%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Unknown CNA (74b3a70d...) as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Unknown CNA (74b3a70d...) as a CNA — matched by CVE ID, not by organization name.