Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
3,050 results · page 42 of 61
Jul 10, 2022The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31580 · Other software · Caretakerr-api Project · reported by MITRECritical 9.3
The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Caretakerr-api
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31579 · Other software · Iasset Project · reported by MITRECritical 9.3
The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Iasset
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31578 · Other software · BT Lnmp Project · reported by MITREHigh 7.5
The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- BT Lnmp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafelyCVE-2022-31577 · Other software · Audio Aligner App Project · reported by MITRECritical 9.3
The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Audio Aligner App
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31576 · Other software · Shackerpanel Project · reported by MITRECritical 9.3
The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Shackerpanel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31575 · Other software · Livro Python Project · reported by MITRECritical 9.3
The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Livro Python
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31574 · Other software · Realestate Project · reported by MITRECritical 9.3
The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Realestate
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31573 · Other software · Chainer · reported by MITRECritical 9.3
The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Chainerrl-visualizer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31572 · Other software · Cockybook Project · reported by MITRECritical 9.3
The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Cockybook
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsCVE-2022-31571 · Other software · Python-flask-restful-api Project · reported by MITRECritical 9.3
The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Python-flask-restful-api
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafCVE-2022-31570 · Other software · Ceneo-web-scrapper Project · reported by MITRECritical 9.8
The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Ceneo-web-scrapper
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31568 · Other software · Rexians · reported by MITRECritical 9.3
The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Rex-web
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31567 · Other software · Data Stream Algorithm Benchmark Project · reported by MITRECritical 9.3
The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Data Stream Algorithm Benchmark
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31566 · Other software · Data Stream Algorithm Benchmark Project · reported by MITREHigh 8.6
The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Data Stream Algorithm Benchmark
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31565 · Other software · Syrabond Project · reported by MITRECritical 9.3
The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Syrabond
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31564 · Other software · Munhak · reported by MITRECritical 9.3
The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Munhak-moa
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31563 · Other software · Vprj Project · reported by MITRECritical 9.3
The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Vprj
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31562 · Other software · Internshipsystem Project · reported by MITRECritical 9.3
The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Internshipsystem
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafelCVE-2022-31561 · Other software · Sphere Imagebackend Project · reported by MITRECritical 9.3
The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Sphere Imagebackend
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31560 · Other software · Photo TAG Project · reported by MITRECritical 9.3
The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Photo TAG
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31559 · Other software · Flask-yeoman Project · reported by MITRECritical 9.3
The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Flask-yeoman
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31558 · Other software · Shiva-server Project · reported by MITRECritical 9.3
The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Shiva-server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31557 · Other software · Golem Project · reported by MITRECritical 9.3
The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Golem
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31556 · Other software · Trainenergyserver Project · reported by MITRECritical 9.3
The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Trainenergyserver
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31555 · Other software · Nurse Quest Project · reported by MITRECritical 9.3
The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Nurse Quest
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is usCVE-2022-31554 · Other software · Movie-review-sentiment-analysis Project · reported by MITRECritical 9.3
The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Movie-review-sentiment-analysis
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31553 · Other software · Sleep Learner Project · reported by MITRECritical 9.3
The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Sleep Learner
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31552 · Other software · Anuvaad-corpus Project · reported by MITRECritical 9.3
The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Anuvaad-corpus
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31551 · Other software · Flask-mongo-skel Project · reported by MITRECritical 9.3
The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Flask-mongo-skel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31550 · Other software · Python Athena Stack Project · reported by MITRECritical 9.3
The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Python Athena Stack
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31549 · Other software · Helm-flask-celery Project · reported by MITRECritical 9.3
The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Helm-flask-celery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31548 · Other software · Homepage Project · reported by MITRECritical 9.3
The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Homepage
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31547 · Other software · Sphere Project · reported by MITRECritical 9.3
The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Sphere
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31546 · Other software · Glance Project · reported by MITRECritical 9.3
The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Glance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31545 · Other software · Modelconverter Project · reported by MITRECritical 9.3
The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Modelconverter
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31544 · Other software · Xtomo · reported by MITRECritical 9.3
The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Robo-tom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31543 · Other software · Setupbox Project · reported by MITRECritical 9.3
The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Setupbox
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31542 · Other software · Mdweb Project · reported by MITRECritical 9.3
The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mdweb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31541 · Other software · Barry Voice Assistant Project · reported by MITRECritical 9.3
The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Barry Voice Assistant
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafeCVE-2022-31540 · Other software · Hin-eng-preprocessing Project · reported by MITRECritical 9.3
The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Hin-eng-preprocessing
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31539 · Other software · Kotekan Project · reported by MITRECritical 9.3
The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Kotekan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31538 · Other software · Mp-m08-interface Project · reported by MITRECritical 9.3
The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Mp-m08-interface
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafeCVE-2022-31537 · Other software · Solar-system-simulator Project · reported by MITRECritical 9.3
The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Solar-system-simulator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31536 · Other software · Ytdl-sync Project · reported by MITRECritical 9.3
The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Ytdl-sync
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31535 · Other software · Fishtank Project · reported by MITRECritical 9.3
The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Fishtank
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31534 · Other software · Pythonweb Project · reported by MITRECritical 9.3
The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Pythonweb
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31533 · Other software · Umbral Project · reported by MITRECritical 9.3
The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Umbral
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31532 · Other software · Travel Blahg Project · reported by MITRECritical 9.3
The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Travel Blahg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31531 · Other software · Dainst · reported by MITRECritical 9.3
The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- Cilantro
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 10, 2022The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.CVE-2022-31530 · Other software · CSM Server Project · reported by MITRECritical 9.3
The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
- Product
- CSM Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.