Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,152 results · page 23 of 24
Jun 22, 2001Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.CVE-2001-1328 · Other software · SUN · reported by MITREHigh 7.5
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordftp.auscert.org.ausunsolve.sun.com
Jun 18, 2001Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uCVE-2001-0249 · Other software · HP · reported by MITRECritical 9.8
Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to generate long strings.
- Product
- Hp-ux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 18, 2001Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.CVE-2001-0401 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Jun 18, 2001/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.CVE-2001-0403 · Other software · SUN · reported by MITREHigh 7.2
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comexchange.xforce.ibmcloud.com
May 3, 2001pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.CVE-2001-0269 · Other software · SUN · reported by MITREHigh 10
pam_ldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
May 3, 2001Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.CVE-2001-0236 · Other software · SUN · reported by MITREHigh 10
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosunsolve.sun.com
May 3, 2001Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.CVE-2001-0165 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
May 3, 2001VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.CVE-2001-0287 · Other software · Symantec Veritas · reported by MITRELow 2.1
VERITAS Cluster Server (VCS) 1.3.0 on Solaris allows local users to cause a denial of service (system panic) via the -L option to the lltstat command.
- Product
- Cluster Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comseer.support.veritas.com
Mar 26, 2001Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a loCVE-2001-0190 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0).
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2001Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.CVE-2001-0115 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 12, 2001Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.CVE-2001-0124 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Feb 12, 2001patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.CVE-2001-0059 · Other software · SUN · reported by MITREMedium 6.2
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Feb 12, 2001catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.CVE-2001-0095 · Other software · SUN · reported by MITRELow 1.2
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comosvdb.org
Jan 9, 2001Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.CVE-2000-1143 · Other software · Recourse Technologies · reported by MITRELow 2.1
Recourse ManTrap 1.6 hides the first 4 processes that run on a Solaris system, which allows attackers to determine that they are in a honeypot system.
- Product
- Mantrap
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Oct 20, 2000The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.CVE-2000-0697 · Other software · SUN · reported by MITREHigh 10
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters.
- Product
- Solaris Answerbook2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comseclists.org
Oct 20, 2000The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which alloCVE-2000-0696 · Other software · SUN · reported by MITREHigh 7.5
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which allows remote attackers to add user accounts to the interface by directly calling the admin CGI script.
- Product
- Solaris Answerbook2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comseclists.org
Jun 14, 2000Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.CVE-2000-0471 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsunsolve.sun.com
May 12, 2000Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.CVE-2000-0407 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Apr 24, 2000Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.CVE-2000-0317 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comarchives.neohapsis.com
Apr 24, 2000Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.CVE-2000-0316 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Apr 24, 2000Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-0337 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordarchives.neohapsis.comsecurityfocus.com
Feb 20, 2000The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.CVE-2000-0164 · Other software · SUN · reported by MITREHigh 7.2
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
- Product
- Solaris ISP Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 6, 2000Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.CVE-2000-0055 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 31, 1999/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary procCVE-1999-1587 · Other software · SUN · reported by MITRELow 2.1
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary processes via the -e option.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecunia.comsecuritytracker.com
Dec 31, 1999Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning withCVE-1999-1588 · Other software · sun · reported by MITRECritical 9.8
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.
- Product
- solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlsd-pl.netsecurity-protocols.com
Dec 31, 1999The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is CVE-1999-1585 · Other software · SUN · reported by MITREHigh 7.2
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is booting, which allows attackers with physical access to gain root privileges.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comsunsolve.sun.com
Dec 22, 1999Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.CVE-2000-0030 · Other software · SUN · reported by MITREMedium 5
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 22, 1999Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.CVE-2000-0032 · Other software · SUN · reported by MITREHigh 10
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Dec 10, 1999Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.CVE-1999-0977 · Other software · SUN · reported by MITREHigh 10
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comosvdb.org
Dec 9, 1999Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.CVE-1999-0974 · Other software · SUN · reported by MITREHigh 10
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comsecurityfocus.com
Dec 7, 1999Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.CVE-1999-0973 · Other software · SUN · reported by MITREHigh 10
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 1, 1999Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.CVE-1999-0860 · Other software · SUN · reported by MITRELow 2.1
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Dec 1, 1999Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.CVE-1999-0859 · Other software · SUN · reported by MITRELow 2.1
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Nov 20, 1999Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.CVE-1999-0818 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 23, 1999Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.CVE-1999-0908 · Other software · SUN · reported by MITREMedium 5
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 22, 1999The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.CVE-1999-0786 · Other software · SUN · reported by MITREMedium 4.6
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Sep 13, 1999Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.CVE-1999-1014 · Other software · SUN · reported by MITREMedium 4.6
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 1999Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.CVE-1999-0767 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 1999sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.CVE-1999-0676 · Other software · SUN · reported by MITREMedium 4.6
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jun 10, 1999useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login afCVE-1999-1023 · Other software · SUN · reported by MITREMedium 4.6
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jun 7, 1999rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotCVE-1999-0493 · Other software · SUN · reported by MITREHigh 7.5
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remotely exploit other bugs such as in automountd.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosunsolve.sun.com
May 11, 1999Buffer overflow in Solaris lpset program allows local users to gain root access.CVE-1999-0773 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris lpset program allows local users to gain root access.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnetspace.orgnetspace.org
May 10, 1999Buffer overflow in Solaris dtprintinfo program.CVE-1999-0806 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris dtprintinfo program.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 199964 bit Solaris 7 procfs allows local users to perform a denial of service.CVE-1999-0417 · Other software · SUN · reported by MITRELow 2.1
64 bit Solaris 7 procfs allows local users to perform a denial of service.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordosvdb.orgsecurityfocus.com
Mar 8, 1999Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.CVE-1999-1371 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecuriteam.com
Mar 5, 1999The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.CVE-1999-0410 · Other software · SUN · reported by MITREHigh 7.2
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Mar 1, 1999Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.CVE-1999-0223 · Other software · SUN · reported by MITRELow 2.1
Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry.
- Product
- Sunos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsunsolve.sun.comsecurityfocus.com
Feb 22, 1999InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.CVE-1999-0378 · Other software · Trend Micro · reported by MITREMedium 5
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands.
- Product
- Interscan Viruswall
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 10, 1999In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.CVE-1999-0370 · Other software · SUN · reported by MITREMedium 4.6
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecurityfocus.com
Jan 28, 1999Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.CVE-1999-0952 · Other software · SUN · reported by MITREHigh 7.2
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
- Product
- Solaris
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.