Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
36added in the last 30 days
587new WordPress flaws this week
391,288entries in the database

1,392 results · page 26 of 28

  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors relatCVE-2014-6559 · Network & remote access · Juniper · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality via vectors related to C API SSL CERTIFICATE HANDLING.

    Product
    Junos Space
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integritCVE-2014-6555 · Other software · Mariadb · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

    Product
    Mariadb
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CCVE-2014-6551 · Other software · Oracle · reported by secalert_us@oracle.comLow 2.1

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrCVE-2014-6530 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to CLIENT:MYSQLDUMP.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.CVE-2014-6520 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:DDL.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrCVE-2014-6507 · Other software · Mariadb · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

    Product
    Mariadb
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectorCVE-2014-6505 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:MEMORY STORAGE ENGINE.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and aCVE-2014-6500 · Other software · Oracle · reported by secalert_us@oracle.comHigh 7.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6491.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related CVE-2014-6496 · Network & remote access · Juniper · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6494.

    Product
    Junos Space
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related CVE-2014-6495 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related CVE-2014-6494 · Other software · Mariadb · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to CLIENT:SSL:yaSSL, a different vulnerability than CVE-2014-6496.

    Product
    Mariadb
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and avaCVE-2014-6491 · Other software · Oracle · reported by secalert_us@oracle.comHigh 7.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via vectors related to SERVER:SSL:yaSSL, a different vulnerability than CVE-2014-6500.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related tCVE-2014-6489 · Other software · Oracle · reported by secalert_us@oracle.comMedium 5.5

    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect integrity and availability via vectors related to SERVER:SP.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectorCVE-2014-6484 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote authenticated users to affect availability via vectors related to SERVER:DML.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to CVE-2014-6478 · Network & remote access · Juniper · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL.

    Product
    Junos Space
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACVE-2014-6474 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-6469 · Other software · Mariadb · reported by secalert_us@oracle.comMedium 6.8

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:OPTIMIZER.

    Product
    Mariadb
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-6464 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:INNODB DML FOREIGN KEYS.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-6463 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.3

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-4287 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:CHARACTER SETS.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availabiCVE-2014-4274 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4.1

    Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect CVE-2014-4260 · Other software · Oracle · reported by secalert_us@oracle.comMedium 5.5

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and availability via vectors related to SRCHAR.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect coCVE-2014-4258 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect avCVE-2014-4243 · Other software · Oracle · reported by secalert_us@oracle.comLow 2.8

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectorCVE-2014-4240 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.6

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows local users to affect confidentiality and integrity via vectors related to SRREP.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-4238 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-4233 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SRREP.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-4214 · Other software · Suse · reported by secalert_us@oracle.comLow 3.3

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect availability via vectors related to SRSP.

    Product
    Linux Enterprise Desktop
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-4207 · Other software · Suse · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to SROPTZR.

    Product
    Linux Enterprise Desktop
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors CVE-2014-2494 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier allows remote authenticated users to affect availability via vectors related to ENARC.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 17, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integritCVE-2014-2484 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to PrivCVE-2014-2451 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Privileges.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to OptiCVE-2014-2450 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability viaCVE-2014-2444 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to InnoDB.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to MyISAM.CVE-2014-2442 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to MyISAM.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown CVE-2014-2438 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integritCVE-2014-2436 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to RBR.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoCVE-2014-2435 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML.CVE-2014-2434 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to DML.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability vCVE-2014-2432 · Other software · Oracle · reported by secalert_us@oracle.comLow 2.8

    Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Federated.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors reCVE-2014-2431 · Other software · Oracle · reported by secalert_us@oracle.comLow 2.6

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown CVE-2014-2430 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown CVE-2014-2419 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Partition.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect avCVE-2014-0384 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown CVE-2013-5882 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.8

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown CVE-2013-5881 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors CVE-2013-5860 · Other software · Oracle · reported by secalert_us@oracle.comMedium 6.8

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticatCVE-2014-0437 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote attackers to affect availability via unknown vectors reCVE-2014-0433 · Other software · Oracle · reported by secalert_us@oracle.comMedium 4.3

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote attackers to affect availability via unknown vectors related to Thread Pooling.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2014Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown CVE-2014-0431 · Other software · Oracle · reported by secalert_us@oracle.comLow 3.5

    Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-5881.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.