Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,769exploited flaws on CISA’s list

30added in the last 30 days

453new WordPress flaws this week

394,547entries in the database

6,284 results · page 125 of 126

Feb 12, 2001simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.CVE-2001-0022 · Other software · Leif M. Wright · reported by MITREHigh 10
simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.
Product
Simplestguest.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Feb 12, 2001everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.CVE-2001-0023 · Other software · Leif M. Wright · reported by MITREHigh 10
everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
Product
Everythingform.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Feb 12, 2001simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.CVE-2001-0024 · Other software · Leif M. Wright · reported by MITREHigh 10
simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.
Product
Simplestmail.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Feb 12, 2001gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detectionCVE-2001-0071 · Other software · GNU · reported by MITRELow 2.1
gpg (aka GnuPG) 1.0.4 and other versions does not properly verify detached signatures, which allows attackers to modify the contents of a file without detection.
Product
Privacy Guard
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record distro.conectiva.com.br debian.org
Feb 12, 2001bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.CVE-2001-0099 · Other software · Brian Stanback · reported by MITREHigh 10
bsguest.cgi guestbook script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
Product
Bsguest.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com stanback.net
Feb 12, 2001bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.CVE-2001-0100 · Other software · Brian Stanback · reported by MITREHigh 10
bslist.cgi mailing list script allows remote attackers to execute arbitrary commands via shell metacharacters in the email address.
Product
Bslist.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com stanback.net
Jan 11, 2001Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows CVE-2001-1044 · Other software · Basilix · reported by MITREHigh 7.5
Basilix Webmail 0.9.7beta, and possibly other versions, stores *.class and *.inc files under the document root and does not restrict access, which could allows remote attackers to obtain sensitive information such as MySQL passwords and usernames from the mysql.class file.
Product
Basilix Webmail
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Jan 9, 2001Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.CVE-2000-1131 · Other software · Bill Kendrick · reported by MITREHigh 7.5
Bill Kendrick web site guestbook (GBook) allows remote attackers to execute arbitrary commands via shell metacharacters in the _MAILTO form variable.
Product
Gbook.cgi
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Jan 9, 2001The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calliCVE-2000-1087 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6
The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.
Product
Data Engine
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info securityfocus.com
Jan 9, 2001modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.CVE-2000-1095 · Other software · Immunix · reported by MITREHigh 7.2
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters.
Product
Immunix
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Dec 19, 2000getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a ..CVE-2000-0902 · Other software · Nathan Purciful · reported by MITREMedium 5
getalbum.php in PhotoAlbum before 0.9.9 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Product
Phpphotoalbum
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com exchange.xforce.ibmcloud.com
Dec 19, 2000global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0952 · Other software · Shigio Yamaguchi · reported by MITREHigh 10
global.cgi CGI program in Global 3.55 and earlier on NetBSD allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
Global
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.netbsd.org osvdb.org
Dec 19, 2000bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.CVE-2000-0978 · Other software · Bb4 · reported by MITREHigh 7.5
bbd server in Big Brother System and Network Monitor before 1.5c2 allows remote attackers to execute arbitrary commands via the "&" shell metacharacter.
Product
BIG Brother Network Monitor
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Dec 19, 2000Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.CVE-2000-0941 · Other software · Kootenay Web INC · reported by MITREHigh 10
Kootenay Web KW Whois 1.0 CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the "whois" parameter.
Product
Kootenay Web INC Whois
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Dec 19, 2000authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.CVE-2000-0923 · Other software · Aplio · reported by MITREHigh 7.5
authenticate.cgi CGI program in Aplio PRO allows remote attackers to execute arbitrary commands via shell metacharacters in the password parameter.
Product
Aplio Phone
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Dec 19, 2000Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.CVE-2000-0910 · Other software · Horde · reported by MITREMedium 4.6
Horde library 1.02 allows attackers to execute arbitrary commands via shell metacharacters in the "from" address.
Product
Horde
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com ssl.coc-ag.de
Dec 11, 2000pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.CVE-2000-1068 · Other software · Cgi-world · reported by MITREHigh 10
pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.
Product
Poll IT
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info cgi-world.com
Dec 11, 2000Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a ..CVE-2000-1048 · Other software · Qbik · reported by MITREMedium 5
Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses encoded characters in the URL.
Product
Wingate
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com exchange.xforce.ibmcloud.com
Nov 20, 2000quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET requesCVE-2000-1223 · Other software · I-soft · reported by MITREHigh 7.5
quikstore.cgi in Quikstore Shopping Cart allows remote attackers to execute arbitrary commands via shell metacharacters in the URL portion of an HTTP GET request.
Product
Quikstore
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record kb.cert.org kb.cert.org
Nov 14, 2000Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.CVE-2000-0861 · Other software · GNU · reported by MITREHigh 7.2
Mailman 1.1 allows list administrators to execute arbitrary commands via shell metacharacters in the %(listname) macro expansion.
Product
Mailman
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Nov 14, 2000The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.CVE-2000-0878 · Other software · Ranson Johnson · reported by MITREHigh 7.5
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
Product
Mailto CGI Script
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Nov 14, 2000search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the querCVE-2000-0835 · Other software · Sambar · reported by MITREMedium 5
search.dll Sambar ISAPI Search utility in Sambar Server 4.4 Beta 3 allows remote attackers to read arbitrary directories by specifying the directory in the query parameter.
Product
Sambar Server
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Oct 20, 2000sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitraCVE-2000-0784 · Other software · Rapidstream · reported by MITREHigh 10
sshd program in the Rapidstream 2.1 Beta VPN appliance has a hard-coded "rsadmin" account with a null password, which allows remote attackers to execute arbitrary commands via ssh.
Product
Rapidstream
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Oct 20, 2000The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.CVE-2000-0697 · Other software · SUN · reported by MITREHigh 10
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
Product
Solaris Answerbook2
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com seclists.org
Oct 20, 2000Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.CVE-2000-0690 · Other software · CGI Script Center · reported by MITREHigh 10
Auction Weaver CGI script 1.02 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the fromfile parameter.
Product
Auction Weaver
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Oct 20, 2000The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.CVE-2000-0701 · Other software · GNU · reported by MITREMedium 4.6
The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges.
Product
Mailman
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Oct 20, 2000eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.CVE-2000-0734 · Other software · Eeye Digital Security · reported by MITREMedium 5
eEye IRIS 1.01 beta allows remote attackers to cause a denial of service via a large number of UDP connections.
Product
Iris
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info securityfocus.com
Oct 20, 2000netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a ..CVE-2000-0782 · Other software · Netwin · reported by MITREMedium 5
netauth.cgi program in Netwin Netauth 4.2e and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Product
Netauth
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record netwinsite.com securityfocus.com
Oct 20, 2000IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses tCVE-2000-0787 · Other software · Xchat · reported by MITREHigh 7.5
IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.
Product
Xchat
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Oct 6, 2000Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.CVE-2000-0816 · Other software · Redhat · reported by MITRELow 2.1
Linux tmpwatch --fuser option allows local users to execute arbitrary commands by creating files whose names contain shell metacharacters.
Product
Linux
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record linux-mandrake.com redhat.com
Jul 12, 2000The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.CVE-2000-0670 · Other software · Cvsweb Developer · reported by MITREHigh 7.2
The cvsweb CGI script in CVSWeb 1.80 allows remote attackers with write access to a CVS repository to execute arbitrary commands via shell metacharacters.
Product
Cvsweb
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org archives.neohapsis.com
Jul 10, 2000The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0635 · Other software · Akopia · reported by MITREHigh 7.5
The view_page.html sample page in the MiniVend shopping cart program allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
Minivend
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Jun 24, 2000ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0585 · Other software · ISC · reported by MITREHigh 10
ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
Dhcp Client
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.netbsd.org
Jun 20, 2000AIX cdmount allows local users to gain root privileges via shell metacharacters.CVE-2000-0466 · Other software · IBM · reported by MITREHigh 7.2
AIX cdmount allows local users to gain root privileges via shell metacharacters.
Product
AIX
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com xforce.iss.net
Jun 9, 2000userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0527 · Other software · 3r Soft · reported by MITREHigh 10
userreg.cgi CGI program in MailStudio 2000 2.0 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
Mailstudio 2000
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
May 24, 2000The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a ..CVE-2000-0443 · Other software · HP · reported by MITREHigh 7.5
The web interface server in HP Web JetAdmin 5.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.
Product
Jetadmin
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
May 24, 2000HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.CVE-2000-0444 · Other software · HP · reported by MITREMedium 5
HP Web JetAdmin 6.0 allows remote attackers to cause a denial of service via a malformed URL to port 8000.
Product
Jetadmin
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
May 19, 2000MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a ..CVE-2000-0436 · Other software · Metaproducts · reported by MITREMedium 5
MetaProducts Offline Explorer 1.2 and earlier allows remote attackers to access arbitrary files via a .. (dot dot) attack.
Product
Offline Explorer
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com metaproducts.com
May 16, 2000The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0432 · Other software · Matt Kruse · reported by MITREHigh 7.5
The calender.pl and the calendar_admin.pl calendar scripts by Matt Kruse allow remote attackers to execute arbitrary commands via shell metacharacters.
Product
Calendar Script
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
May 15, 2000The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0424 · Other software · George Burgyan · reported by MITREHigh 7.5
The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
CGI Counter
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
May 11, 2000The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0421 · Computers, phones & browsers · Mozilla · reported by MITREHigh 7.5
The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.
Product
Bugzilla
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Apr 24, 2000The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.CVE-2000-0322 · Other software · Redhat · reported by MITREHigh 10
The passwd.php3 CGI script in the Red Hat Piranha Virtual Server Package allows local users to execute arbitrary commands via shell metacharacters.
Product
Linux
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record redhat.com securityfocus.com
Apr 12, 2000The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.CVE-2000-0287 · Other software · CNC · reported by MITREHigh 10
The BizDB CGI script bizdb-search.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the dbname parameter.
Product
Technology Bizdb
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Apr 11, 2000The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.CVE-2000-0252 · Other software · Craig Dansie · reported by MITREMedium 5
The dansie shopping cart application cart.pl allows remote attackers to execute commands via a shell metacharacters in a form variable.
Product
Dansie Shopping Cart
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Mar 31, 2000fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.CVE-2000-0296 · Other software · Michael A. Gumienny · reported by MITREHigh 7.2
fcheck allows local users to gain privileges by embedding shell metacharacters into file names that are processed by fcheck.
Product
Fcheck
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Mar 29, 2000The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.CVE-2000-0244 · Network & remote access · Citrix · reported by MITREHigh 10
The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.
Product
Metaframe
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Mar 26, 2000Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.CVE-2000-0281 · Other software · Napster · reported by MITRELow 2.1
Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.
Product
Napster Client
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com archives.neohapsis.com
Mar 25, 2000WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.CVE-2000-0242 · Other software · Geocel · reported by MITREMedium 5
WindMail allows remote attackers to read arbitrary files or execute commands via shell metacharacters.
Product
Windmail
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Mar 2, 2000DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-0177 · Other software · Dnstools Software · reported by MITREHigh 10
DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.
Product
Dnstools
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Mar 1, 2000SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.CVE-2000-0207 · Other software · SGI · reported by MITREHigh 7.5
SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.
Product
Infosearch
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record patches.sgi.com securityfocus.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.