Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
14 results
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19021 · Other software · Titanhq · reported by MITRECritical 9.8
An issue was discovered in TitanHQ WebTitan before 5.18. It has a hidden support account (with a hard-coded password) in the web administration interface, with administrator privileges. Anybody can log in with this account.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19020 · Other software · Titanhq · reported by MITREHigh 7.2
An issue was discovered in TitanHQ WebTitan before 5.18. In the administration web interface it is possible to upload a crafted backup file that enables an attacker to execute arbitrary code by overwriting existing files or adding new PHP files under the web root. This requires the attacker to have access to a valid web interface account.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19019 · Other software · Titanhq · reported by MITREHigh 7.5
An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is analogous to CVE-2019-6800 but for a different product.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19018 · Other software · Titanhq · reported by MITRELow 2.7
An issue was discovered in TitanHQ WebTitan before 5.18. It exposes a database configuration file under /include/dbconfig.ini in the web administration interface, revealing what database the web application is using.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19017 · Other software · Titanhq · reported by MITREHigh 8.1
An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19016 · Other software · Titanhq · reported by MITREHigh 7.5
An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injection through the results parameter. This could be used by an attacker to extract sensitive information from the appliance database.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19015 · Other software · Titanhq · reported by MITRECritical 9.8
An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy (without password authentication), an attacker is able to fully control the appliance database. Through this, several different paths exist to gain further access, or execute code.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Dec 2, 2019An issue was discovered in TitanHQ WebTitan before 5.18.CVE-2019-19014 · Other software · Titanhq · reported by MITREHigh 7.8
An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordwrite-up.github.iowebtitan.com
Mar 12, 2018TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature.CVE-2017-18227 · Other software · Titanhq · reported by MITREHigh 7.5
TitanHQ WebTitan Gateway has incorrect certificate validation for the TLS interception feature.
- Product
- Webtitan Gateway
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddx.doi.orgjhalderm.com
Jun 18, 2014SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter.CVE-2014-4307 · Other software · Webtitan · reported by MITREHigh 7.5
SQL injection vulnerability in categories-x.php in WebTitan before 4.04 allows remote attackers to execute arbitrary SQL commands via the sortkey parameter.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comsec-consult.com
Jun 18, 2014Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a ..CVE-2014-4306 · Other software · Webtitan · reported by MITREMedium 5
Directory traversal vulnerability in logs-x.php in WebTitan before 4.04 allows remote attackers to read arbitrary files via a .. (dot dot) in the logfile parameter in a download action.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comsec-consult.com
Oct 8, 2012Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a ..CVE-2011-4640 · Other software · Spamtitan · reported by MITREMedium 4
Directory traversal vulnerability in logs-x.php in SpamTitan WebTitan before 3.60 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the fname parameter in a view action.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2012The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands viCVE-2011-4639 · Other software · Spamtitan · reported by MITREMedium 6.5
The (1) Traceroute and (2) Ping implementations in tools.php in SpamTitan WebTitan before 3.60 allow remote authenticated users to execute arbitrary commands via shell metacharacters in an argument, as demonstrated by an && (ampersand ampersand) sequence.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 8, 2012Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via (1) the username parameterCVE-2011-4638 · Other software · Spamtitan · reported by MITREHigh 7.5
Multiple SQL injection vulnerabilities in SpamTitan WebTitan before 3.60 allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login-x.php, and allow remote authenticated users to execute arbitrary SQL commands via the (2) bldomain, (3) wldomain, or (4) temid parameter to urls-x.php.
- Product
- Webtitan
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.