Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 11 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
36added in the last 30 days
512new WordPress flaws this week
391,181entries in the database

1,068 results · page 13 of 22

  • Sep 27, 2023Permission control vulnerability in the audio module.CVE-2023-41312 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Permission control vulnerability in the audio module.CVE-2023-41311 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Keep-alive vulnerability in the sticky broadcast mechanism.CVE-2023-41310 · Other software · Huawei · reported by psirt@huawei.comLow 3.3

    Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Permission control vulnerability in the MediaPlaybackController module.CVE-2023-41309 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Screenshot vulnerability in the input module.CVE-2023-41308 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Memory overwriting vulnerability in the security module.CVE-2023-41307 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Vulnerability of mutex management in the bone voice ID trusted application (TA) module.CVE-2023-41306 · Other software · Huawei · reported by psirt@huawei.comLow 3.7

    Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module.CVE-2023-41305 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 27, 2023Stability-related vulnerability in the binder background management and control module.CVE-2022-48606 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Command injection vulnerability in the distributed file system module.CVE-2023-41303 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Redirection permission verification vulnerability in the home screen module.CVE-2023-41302 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of unauthorized API access in the PMS module.CVE-2023-41301 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of parameters not being strictly verified in the PMS module.CVE-2023-41300 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Data security classification vulnerability in the DDMP module.CVE-2023-41293 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Input verification vulnerability in the fingerprint module.CVE-2022-48605 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-41299 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of permission control in the window module.CVE-2023-41298 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of defects introduced in the design process in the HiviewTunner module.CVE-2023-41297 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of missing authorization in the kernel module.CVE-2023-41296 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023Vulnerability of improper permission management in the displayengine module.CVE-2023-41295 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.CVE-2023-41294 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-39409 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-39408 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2023The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.CVE-2023-39407 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Permission control vulnerability in the XLayout component.CVE-2023-39406 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameter verification in certain APIs in the window management module.CVE-2023-39404 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39403 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39402 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39401 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39400 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39399 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39398 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Input parameter verification vulnerability in the communication system.CVE-2023-39397 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Mismatch vulnerability in the serialization process in the communication system.CVE-2023-39395 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of API privilege escalation in the wifienhance module.CVE-2023-39394 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of system file information leakage in the USB Service module.CVE-2023-39391 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameter verification in certain APIs in the window management module.CVE-2023-39390 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of permission control in the window management module.CVE-2023-39387 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameters being not strictly verified in the PMS module.CVE-2023-39386 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of configuration defects in the media module of certain products..CVE-2023-39385 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of defects introduced in the design process in the Multi-Device Task Center.CVE-2021-46895 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module.CVE-2023-39405 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with escalated privileges.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Deserialization vulnerability in the input module.CVE-2023-39396 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of insecure signatures in the ServiceWifiResources module.CVE-2023-39393 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of insecure signatures in the OsuLogin module.CVE-2023-39392 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameters being not strictly verified in the PMS module.CVE-2023-39389 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameters being not strictly verified in the PMS module.CVE-2023-39388 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of incomplete permission verification in the input method module.CVE-2023-39384 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023Vulnerability of input parameters being not strictly verified in the AMS module.CVE-2023-39383 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 13, 2023 Input verification vulnerability in the audio module.CVE-2023-39382 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.