Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
44 results
Oct 20, 2023Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-5686 · Other software · radareorg · reported by security@huntr.devHigh 8.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 14, 2023Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-4322 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 23, 2023Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.CVE-2023-1605 · Other software · radareorg · reported by security@huntr.devHigh 7.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 14, 2023Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.CVE-2023-0302 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 29, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.CVE-2022-4843 · Other software · radareorg · reported by security@huntr.devHigh 7.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2022Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.CVE-2022-4398 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 26, 2022Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1899 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 21, 2022Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1809 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 13, 2022Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1714 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2022Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1649 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 24, 2022Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1452 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 24, 2022Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1451 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 23, 2022heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1444 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 22, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1437 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1383 · Other software · radareorg · reported by security@huntr.devMedium 6.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1382 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2022Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1297 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2022Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1296 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2022heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1284 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2022NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1283 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6.CVE-2022-1240 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1238 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1237 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 5, 2022heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1244 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 2022Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1207 · Other software · radareorg · reported by security@huntr.devMedium 6.6
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2022Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-1052 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2022Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1061 · Other software · radareorg · reported by security@huntr.devHigh 7.5
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 22, 2022Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-1031 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2022Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-0849 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 24, 2022Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0695 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 23, 2022Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0476 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 22, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0713 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 22, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0712 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 21, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.CVE-2022-0676 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 16, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0559 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0523 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.CVE-2022-0522 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0521 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in NPM radare2.js prior to 5.6.2.CVE-2022-0520 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in NPM radare2.js prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0519 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.CVE-2022-0518 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 8, 2022Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.CVE-2022-0139 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 1, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.CVE-2022-0419 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comcensus-labs.com
Jan 11, 2022radare2 is vulnerable to Out-of-bounds ReadCVE-2022-0173 · Other software · radareorg · reported by security@huntr.devMedium 5.5
radare2 is vulnerable to Out-of-bounds Read
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.