Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
474new WordPress flaws this week
390,714entries in the database

31 results

  • Jul 9, 2026An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attackCVE-2026-57021 · Network & remote access · Juniper Networks · reported by sirt@juniper.netMedium 6.9

    An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a network-based attacker sending specifically formatted requests can trigger an out of bounds write leading to an http-gk process crash. This crash leads to unavailability of all services depending on the [ system services web-management ] configuration (like J-Web, remote access VPN and firewall authentication) until the process automatically restarts. This issue affects Junos OS on SRX Series: * 23.2 versions before 23.2R2-S7, * 23.4 versions before 23.4R2-S8, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S4, * 25.2 versions before 25.2R2, * 25.4 versions before 25.4R1-S1, 25.4R2.

    Product
    Junos OS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 15, 2026Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious databaseCVE-2021-47782 · Other software · Odinesolutions · reported by VulnCheckHigh 7.1

    Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.

    Product
    Odine Solutions GateKeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 7, 2025Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to aCVE-2024-45551 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 6.2

    Cryptographic issue occurs during PIN/password verification using Gatekeeper, where RPMB writes can be dropped on verification failure, potentially leading to a user throttling bypass.

    Product
    Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 8, 2023This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder.CVE-2023-23526 · Computers, phones & browsers · Apple · reported by product-security@apple.comCritical 9.8

    This was addressed with additional checks by Gatekeeper on files downloaded from an iCloud shared-by-me folder. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. A file from an iCloud shared-by-me folder may be able to bypass Gatekeeper.

    Product
    macOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 2022A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PECVE-2022-28886 · Other software · F-Secure and WithSecure · reported by cve-notifications-us@f-secure.comMedium 4.3

    A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.so/aerdl.dll may go into an infinite loop when unpacking PE files. It is possible that this can crash the scanning engine

    Product
    All F-Secure and WithSecure Endpoint Protection products for Windows running 32 bit operating system. F-Secure Linux Security 32 F-Secure Internet Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 11, 2022In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key.CVE-2022-20377 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7

    In TBD of keymaster_ipc.cpp, there is a possible to force gatekeeper, fingerprint, and faceauth to use a known HMAC key. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-222339795References: N/A

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 15, 2022In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch.CVE-2022-20135 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8

    In writeToParcel of GateKeeperResponse.java, there is a possible parcel format mismatch. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220303465

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 1, 2022A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while CVE-2021-44747 · Other software · F-Secure · reported by cve-notifications-us@f-secure.comMedium 4.6

    A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Linux Security whereby the Fmlib component used in certain F-Secure products can crash while scanning fuzzed files. The exploit can be triggered remotely by an attacker. A successful attack will result in Denial-of-Service of the Anti-Virus engine.

    Product
    F-Secure endpoint protection products on Mac, F-Secure Linux Security (32-bit), F-Secure Linux Security 64, F-Secure Atlant, F-Secure Internet Gatekeeper & F-Se
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 26, 2021A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service.CVE-2021-40833 · Other software · F-Secure · reported by cve-notifications-us@f-secure.comMedium 5.5

    A vulnerability affecting F-Secure antivirus engine was discovered whereby unpacking UPX file can lead to denial-of-service. The vulnerability can be exploited remotely by an attacker. A successful attack will result in denial-of-service of the antivirus engine.

    Product
    F-Secure endpoint protection products on Windows and Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Internet Gatekeeper & F-Secure A
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 17, 2021Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control.CVE-2021-43979 · Other software · Openpolicyagent · reported by MITREMedium 5.3

    Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access control. The data replication mechanism allows policies to access the Kubernetes cluster state. During data replication, OPA/Gatekeeper does not wait for the replication to finish before processing a request, which might cause inconsistencies between the replicated resources in OPA/Gatekeeper and the resources actually present in the cluster. Inconsistency can later be reflected in a policy bypass. NOTE: the vendor disagrees that this is a vulnerability, because Kubernetes states are only eventually consistent

    Product
    Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 28, 2021A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper.CVE-2021-33601 · Other software · F-Secure · reported by cve-notifications-us@f-secure.comHigh 7.6

    A vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. An authenticated user can modify settings through the web user interface in a way that could lead to an arbitrary code execution on the F-Secure Internet Gatekeeper server.

    Product
    F-Secure Internet Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 28, 2021A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper.CVE-2021-33600 · Other software · F-Secure · reported by cve-notifications-us@f-secure.comMedium 5.4

    A denial-of-service (DoS) vulnerability was discovered in the web user interface of F-Secure Internet Gatekeeper. The vulnerability occurs because of an attacker can trigger assertion via malformed HTTP packet to web interface. An unauthenticated attacker could exploit this vulnerability by sending a large username parameter. A successful exploitation could lead to a denial-of-service of the product.

    Product
    F-Secure Internet Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 23, 2021A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an attacker can bypass our Gatekeeper.CVE-2020-14359 · Other software · Redhat · reported by Red HatHigh 7.3

    A vulnerability was found in all versions of Keycloak Gatekeeper, where on using lower case HTTP headers (via cURL) an attacker can bypass our Gatekeeper. Lower case headers are also accepted by some webservers (e.g. Jetty). This means there is no protection when we put a Gatekeeper in front of a Jetty server and use lowercase headers.

    Product
    Louketo Proxy
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 28, 2021A flaw was found in Keycloak Gatekeeper (Louketo).CVE-2020-1723 · Other software · Louketo · reported by Red HatMedium 6.1

    A flaw was found in Keycloak Gatekeeper (Louketo). The logout endpoint can be abused to redirect logged-in users to arbitrary web pages. Affected versions of Keycloak Gatekeeper (Louketo): 6.0.1, 7.0.0

    Product
    Keycloak Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 12, 2020u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen passwoCVE-2020-11123 · Computers, phones & browsers · Qualcomm, Inc. · reported by product-security@qualcomm.comMedium 5.5

    u'information disclosure in gatekeeper trustzone implementation as the throttling mechanism to prevent brute force attempts at getting user`s lock-screen password can be bypassed by performing the standard gatekeeper operations.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in APQ8009, APQ8009W, APQ8017, APQ8037, APQ8053, APQ8064AU, APQ8096, APQ8096AU, APQ8096SG, APQ8098, MDM8207, MDM9150, MDM9205, MDM9206, MDM9207, MDM9250, MDM9607, MDM9628, MDM9640, MDM9650, MDM9655, MSM8108, MSM8208, MSM8209, MSM8608, MSM8905, MSM8909, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, MSM8996, MSM8996AU, MSM8996SG, MSM8998, QCM4290, QCS405, QCS410, QCS4290, QCS603, QCS605, QCS610, QM215, QSM8250, QSM8350, SA415M, SA515M, SA6145P, SA6150P, SA6155, SA6155P, SA8150P, SA8155, SA8155P, SA8195P, SC7180, SC8180X, SC8180XP, SDA429W, SDA640, SDA660, SDA670, SDA845, SDA855, SDM1000, SDM429, SDM429W, SDM439, SDM450, SDM455, SDM630, SDM632, SDM636, SDM640, SDM660, SDM670, SDM710, SDM712, SDM830, SDM845,

    Product
    Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 27, 2020This was addressed with additional checks by Gatekeeper on files mounted through a network share.CVE-2019-8656 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 5.5

    This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. Extracting a zip file containing a symbolic link to an endpoint in an NFS mount that is attacker controlled may bypass Gatekeeper.

    Product
    macOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2020This was addressed with additional checks by Gatekeeper on files mounted through a network share.CVE-2020-3866 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 5.5

    This was addressed with additional checks by Gatekeeper on files mounted through a network share. This issue is fixed in macOS Catalina 10.15.3. Searching for and opening a file from an attacker controlled NFS mount may bypass Gatekeeper.

    Product
    macOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 5, 2019In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free.CVE-2019-2115 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8

    In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 3, 2017An elevation of privilege vulnerability in the Android framework (gatekeeperresponse).CVE-2017-0806 · Computers, phones & browsers · Google Inc. · reported by security@android.comHigh 7.8

    An elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62998805.

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 11, 2016Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan CVE-2015-7024 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 6.7

    Untrusted search path vulnerability in Apple OS X before 10.11.1 allows local users to bypass intended Gatekeeper restrictions and gain privileges via a Trojan horse program that is loaded from an unexpected directory by an application that has a valid Apple digital signature.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 30, 2015LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism viCVE-2014-8826 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 5

    LaunchServices in Apple OS X before 10.10.2 does not properly handle file-type metadata, which allows attackers to bypass the Gatekeeper protection mechanism via a crafted JAR archive.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 31, 2012GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection anCVE-2012-3534 · Other software · Opensuse · reported by Red HatMedium 5

    GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.

    Product
    Leap
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 18, 2011F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentiaCVE-2011-0453 · Other software · F-secure · reported by vultures@jpcert.or.jpMedium 5

    F-Secure Internet Gatekeeper for Linux 3.x before 3.03 does not require authentication for reading access logs, which allows remote attackers to obtain potentially sensitive information via a TCP session on the admin UI port.

    Product
    Internet Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 15, 2010F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for WindCVE-2010-1425 · Other software · F-secure · reported by MITREMedium 5

    F-Secure Internet Security 2010 and earlier; Anti-Virus for Microsoft Exchange 9 and earlier, and for MIMEsweeper 5.61 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, and for Linux 4.02 and earlier; Anti-Virus 2010 and earlier; Home Server Security 2009; Protection Service for Consumers 9 and earlier, for Business - Workstation security 9 and earlier, for Business - Server Security 8 and earlier, and for E-mail and Server security 9 and earlier; Mac Protection build 8060 and earlier; Client Security 9 and earlier; and various Anti-Virus products for Windows, Linux, and Citrix; does not properly detect malware in crafted (1) 7Z, (2) GZIP, (3) CAB, or (4) RAR archives, which makes it easier for remote attackers to avoid detection.

    Product
    Anti-virus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 22, 2009Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6CVE-2009-1782 · Other software · F-secure · reported by MITREMedium 6.8

    Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive.

    Product
    Anti-virus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 6, 2006Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackerCVE-2006-2838 · Other software · F-secure · reported by MITREHigh 7.6

    Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections are only allowed from the local host.

    Product
    F-secure Anti-virus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 16, 2005suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executCVE-2005-3546 · Other software · F-secure · reported by MITREHigh 7.2

    suid.cgi scripts in F-Secure (1) Internet Gatekeeper for Linux before 2.15.484 and (2) Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege.

    Product
    F-secure Anti-virus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 2, 2005Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypCVE-2005-3468 · Other software · F-secure · reported by MITREMedium 5

    Directory traversal vulnerability in F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40 to 6.42 allows limited remote attackers to bypass Web Console authentication and read files.

    Product
    F-secure Anti-virus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 23, 2004Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.CVE-2004-0326 · Other software · Proxy-pro · reported by MITREHigh 10

    Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.

    Product
    Professional Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 20, 2001Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (CVE-2001-0546 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5

    Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.

    Product
    ISA Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 13, 2000Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string.CVE-2000-0675 · Other software · Infopulse · reported by MITREHigh 7.5

    Buffer overflow in Infopulse Gatekeeper 3.5 and earlier allows remote attackers to execute arbitrary commands via a long string.

    Product
    Gatekeeper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.