Updated 6 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list

33added in the last 30 days

545new WordPress flaws this week

391,964entries in the database

4,307 results · page 80 of 87

Jun 19, 2022A vulnerability classified as problematic has been found in FFmpeg 2.0.CVE-2014-125025 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function decode_pulses. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 19, 2022A vulnerability was found in FFmpeg 2.0 and classified as problematic.CVE-2014-125021 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function cmv_process_header. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 19, 2022A vulnerability has been found in FFmpeg 2.0 and classified as critical.CVE-2014-125020 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_update_thread_context. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 19, 2022A vulnerability, which was classified as problematic, was found in FFmpeg 2.0.CVE-2014-125019 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_nal_unit of the component Slice Segment Handler. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 19, 2022A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0.CVE-2014-125018 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function decode_slice_header. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as critical was found in FFmpeg 2.0.CVE-2014-125017 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as critical has been found in FFmpeg 2.0.CVE-2014-125015 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as problematic was found in FFmpeg 2.0.CVE-2014-125014 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is an unknown functionality of the component HEVC Video Decoder. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability was found in FFmpeg 2.0 and classified as problematic.CVE-2014-125013 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function msrle_decode_frame of the file libavcodec/msrle.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as problematic has been found in FFmpeg 2.0.CVE-2014-125009 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in FFmpeg 2.0. This affects the function add_yblock of the file libavcodec/snow.h. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as problematic has been found in FFmpeg 2.0.CVE-2014-125008 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability classified as problematic has been found in FFmpeg 2.0. Affected is the function vorbis_header of the file libavformat/oggparsevorbis.c. The manipulation leads to memory corruption. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability classified as problematic was found in FFmpeg 2.0.CVE-2014-125007 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability classified as problematic was found in FFmpeg 2.0. Affected by this vulnerability is the function intra_pred of the file libavcodec/hevcpred_template.c. The manipulation leads to memory corruption. The attack can be launched remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0.CVE-2014-125006 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in FFmpeg 2.0. Affected by this issue is the function output_frame of the file libavcodec/h264.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability, which was classified as problematic, was found in FFmpeg 2.0.CVE-2014-125005 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, was found in FFmpeg 2.0. This affects the function decode_vol_header of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability has been found in FFmpeg 2.0 and classified as problematic.CVE-2014-125004 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decode_hextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 18, 2022A vulnerability was found in FFmpeg 2.0 and classified as problematic.CVE-2014-125003 · Other software · unspecified · reported by VulDBMedium 5.3
A vulnerability was found in FFmpeg 2.0 and classified as problematic. This issue affects the function get_siz of the file libavcodec/jpeg2000dec.c. The manipulation leads to memory corruption. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue.
Product
FFmpeg
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record git.videolan.org vuldb.com
Jun 17, 2022A vulnerability classified as critical was found in GE Voluson S8.CVE-2020-36549 · Other software · GE · reported by ics-cert@hq.dhs.govHigh 8.8
A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating system. Missing patches might introduce an excessive attack surface. Access to the local network is required for this attack to succeed.
Product
Voluson S8
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com scip.ch
Jun 17, 2022A vulnerability classified as problematic has been found in GE Voluson S8.CVE-2020-36548 · Other software · GE · reported by ics-cert@hq.dhs.govMedium 5.9
A vulnerability classified as problematic has been found in GE Voluson S8. Affected is the file /uscgi-bin/users.cgi of the Service Browser. The manipulation leads to improper authentication and elevated access possibilities. It is possible to launch the attack on the local host.
Product
Voluson S8
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com scip.ch
Jun 17, 2022A vulnerability, which was classified as critical, has been found in uTorrent.CVE-2018-25044 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Product
uTorrent
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record math.sci.hiroshima-u.ac.jp bugs.chromium.org
Jun 17, 2022A vulnerability classified as critical was found in uTorrent.CVE-2018-25043 · Other software · unspecified · reported by VulDBMedium 5
A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.
Product
uTorrent
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record math.sci.hiroshima-u.ac.jp bugs.chromium.org
Jun 17, 2022A vulnerability classified as critical has been found in uTorrent.CVE-2018-25042 · Other software · unspecified · reported by VulDBMedium 5
A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.
Product
uTorrent
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record bugs.chromium.org vuldb.com
Jun 16, 2022A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0.CVE-2017-20055 · Other software · BestWebSoft · reported by VulDBLow 3.5
A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basic cross site scripting (Stored). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.2 is able to address this issue. It is recommended to upgrade the affected component.
Product
Contact Form Plugin
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org sumofpwn.nl
Jun 16, 2022A vulnerability classified as problematic was found in Python 2.7.13.CVE-2017-20052 · Other software · unspecified · reported by VulDBMedium 5
A vulnerability classified as problematic was found in Python 2.7.13. This vulnerability affects unknown code of the component pgAdmin4. The manipulation leads to uncontrolled search path. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Product
Python
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org security.netapp.com
Jun 15, 2022In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission checkCVE-2022-20204 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8
In registerRemoteBugreportReceivers of DevicePolicyManagerService.java, there is a possible reporting of falsified bug reports due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-171495100
Product
Android
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record source.android.com source.android.com
Jun 15, 2022A vulnerability classified as critical has been found in FileCloud.CVE-2022-1958 · Other software · Filecloud · reported by VulDBMedium 6.3
A vulnerability classified as critical has been found in FileCloud. Affected is an unknown function of the component NTFS Handler. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Upgrading to version 21.3.5.18513 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-201960.
Product
Filecloud
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com vuldb.com
Jun 13, 2022A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic.CVE-2017-20043 · Other software · Navetti · reported by VulDBMedium 4.3
A vulnerability was found in Navetti PricePoint 4.6.0.0 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component.
Product
PricePoint
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 13, 2022A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical.CVE-2017-20042 · Other software · Navetti · reported by VulDBMedium 6.3
A vulnerability has been found in Navetti PricePoint 4.6.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql injection (Blind). The attack can be launched remotely. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component.
Product
PricePoint
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 12, 2022A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic.CVE-2018-25037 · Other software · Thomson · reported by VulDBLow 3.5
A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Product
TCW710
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record alquimistadesistemas.com vuldb.com
Jun 12, 2022A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic.CVE-2018-25036 · Other software · Thomson · reported by VulDBLow 3.5
A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Product
TCW710
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record alquimistadesistemas.com vuldb.com
Jun 12, 2022A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05.CVE-2018-25035 · Other software · Thomson · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Product
TCW710
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record alquimistadesistemas.com vuldb.com
Jun 12, 2022A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05.CVE-2018-25034 · Other software · Thomson · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to basic cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-126695.
Product
TCW710
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record alquimistadesistemas.com vuldb.com
Jun 11, 2022A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical.CVE-2017-20038 · Other software · SICUNET · reported by VulDBMedium 6.3
A vulnerability was found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this issue is some unknown functionality of the file card_scan_decoder.php. The manipulation of the argument No/door leads to privilege escalation. The attack may be launched remotely.
Product
Access Controller
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 11, 2022A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical.CVE-2017-20037 · Other software · SICUNET · reported by VulDBMedium 6.3
A vulnerability has been found in SICUNET Access Controller 0.32-05z and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument c leads to privilege escalation. The attack can be launched remotely.
Product
Access Controller
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 10, 2022A vulnerability, which was classified as problematic, was found in PHPList 3.2.6.CVE-2017-20036 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, was found in PHPList 3.2.6. Affected is an unknown function of the file /lists/admin/ of the component Bounce Rule. The manipulation leads to cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
PHPList
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 10, 2022A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6.CVE-2017-20035 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting (Persistent). The attack may be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
PHPList
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 10, 2022A vulnerability classified as problematic was found in PHPList 3.2.6.CVE-2017-20034 · Other software · unspecified · reported by VulDBLow 3.5
A vulnerability classified as problematic was found in PHPList 3.2.6. This vulnerability affects unknown code of the file /lists/admin/ of the component List Name. The manipulation leads to cross site scripting (Persistent). The attack can be initiated remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
PHPList
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 10, 2022A vulnerability classified as problematic has been found in PHPList 3.2.6.CVE-2017-20033 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability classified as problematic has been found in PHPList 3.2.6. This affects an unknown part of the file /lists/admin/. The manipulation of the argument page with the input send\'\";><script>alert(8)</script> leads to cross site scripting (Reflected). It is possible to initiate the attack remotely. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
PHPList
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 10, 2022A vulnerability was found in PHPList 3.2.6 and classified as critical.CVE-2017-20029 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.3.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
PHPList
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability was found in HumHub up to 1.0.1 and classified as problematic.CVE-2017-20027 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability was found in HumHub up to 1.0.1 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting (DOM). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
HumHub
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic.CVE-2017-20026 · Other software · unspecified · reported by VulDBMedium 4.3
A vulnerability has been found in HumHub up to 1.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting (Reflected). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.
Product
HumHub
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical.CVE-2017-20023 · Other software · Solare · reported by VulDBMedium 6.3
A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as critical. This issue affects some unknown processing of the component Network Config. The manipulation leads to privilege escalation. The attack may be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Product
Solar-Log
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic.CVE-2017-20022 · Other software · Solare · reported by VulDBHigh 7.5
A vulnerability has been found in Solare Solar-Log 2.8.4-56/3.5.2-85 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to information disclosure. The attack can be initiated remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Product
Solar-Log
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85.CVE-2017-20021 · Other software · Solare · reported by VulDBMedium 6.5
A vulnerability, which was classified as critical, was found in Solare Solar-Log 2.8.4-56/3.5.2-85. This affects an unknown part of the component File Upload. The manipulation leads to privilege escalation. It is possible to initiate the attack remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Product
Solar-Log
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85.CVE-2017-20020 · Other software · Solare · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this issue is some unknown functionality. The manipulation leads to cross site request forgery. The attack may be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Product
Solar-Log
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85.CVE-2017-20019 · Other software · Solare · reported by VulDBMedium 4.3
A vulnerability classified as problematic was found in Solare Solar-Log 2.8.4-56/3.5.2-85. Affected by this vulnerability is an unknown functionality of the component Config Handler. The manipulation leads to information disclosure. The attack can be launched remotely. Upgrading to version 3.5.3-86 is able to address this issue. It is recommended to upgrade the affected component.
Product
Solar-Log
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org vuldb.com
Jun 9, 2022A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0.CVE-2019-25069 · Other software · Axios Italia · reported by VulDBMedium 5.3
A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure (ASP.NET). The attack may be initiated remotely.
Product
Axios RE
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com vuldb.com
Jun 9, 2022A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0.CVE-2019-25068 · Other software · Axios Italia · reported by VulDBMedium 6.3
A vulnerability classified as critical was found in Axios Italia Axios RE 1.7.0/7.0.0. This vulnerability affects unknown code of the file REDefault.aspx of the component Connection Handler. The manipulation of the argument DBIDX leads to privilege escalation. The attack can be initiated remotely.
Product
Axios RE
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com vuldb.com
Jun 9, 2022A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1.CVE-2019-25067 · Other software · Podman Project · reported by VulDBMedium 6.3
A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation leads to Remote Privilege Escalation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-143949 was assigned to this vulnerability.
Product
Podman
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com vuldb.com
Jun 9, 2022A vulnerability has been found in ajenti 2.1.31 and classified as critical.CVE-2019-25066 · Other software · unspecified · reported by VulDBMedium 6.3
A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1.32 is able to address this issue. The name of the patch is 7aa146b724e0e20cfee2c71ca78fafbf53a8767c. It is recommended to upgrade the affected component.
Product
ajenti
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com vuldb.com
Jun 9, 2022A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63.CVE-2016-15002 · Other software · unspecified · reported by VulDBHigh 7.3
A vulnerability, which was classified as critical, was found in MONyog Ultimate 6.63. This affects an unknown part of the component Cookie Handler. The manipulation of the argument HasServerEdit/IsAdmin leads to privilege escalation. It is possible to initiate the attack remotely.
Product
MONyog Ultimate
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record vuldb.com youtu.be

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.