Updated 4 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list

35added in the last 30 days

456new WordPress flaws this week

390,714entries in the database

548 results · page 11 of 11

Feb 12, 2001Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications CVE-2001-0094 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in kdc_reply_cipher of libkrb (Kerberos 4 authentication library) in NetBSD 1.5 and FreeBSD 4.2 and earlier, as used in Kerberised applications such as telnetd and login, allows local users to gain root privileges.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.netbsd.org
Feb 12, 2001Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telCVE-2001-0093 · Other software · Freebsd · reported by MITREHigh 7.2
Vulnerability in telnetd in FreeBSD 1.5 allows local users to gain root privileges by modifying critical environmental variables that affect the behavior of telnetd.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.netbsd.org ftp.netbsd.org
Feb 12, 2001procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional priviCVE-2001-0063 · Other software · Freebsd · reported by MITREHigh 7.2
procfs in FreeBSD and possibly other operating systems allows local users to bypass access control restrictions for a jail environment and gain additional privileges.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Feb 12, 2001procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain rootCVE-2001-0061 · Other software · Freebsd · reported by MITREHigh 7.2
procfs in FreeBSD and possibly other operating systems does not properly restrict access to per-process mem and ctl files, which allows local users to gain root privileges by forking a child process and executing a privileged process from the child, while the parent retains access to the child's address space.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Jan 9, 2001telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large CVE-2000-1184 · Other software · Freebsd · reported by MITREMedium 5
telnetd in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service by specifying an arbitrary large file in the TERMCAP environmental variable, which consumes resources as the server processes the file.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Jan 9, 2001ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to conCVE-2000-1167 · Other software · Freebsd · reported by MITREHigh 7.5
ppp utility in FreeBSD 4.1.1 and earlier does not properly restrict access as specified by the "nat deny_incoming" command, which allows remote attackers to connect to the target system.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Dec 19, 2000fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.CVE-2000-0915 · Other software · Freebsd · reported by MITREMedium 5
fingerd in FreeBSD 4.1.1 allows remote attackers to read arbitrary files by specifying the target file name instead of a regular user name.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org archives.neohapsis.com
Dec 19, 2000Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as CVE-2000-0993 · Other software · Freebsd · reported by MITREHigh 7.2
Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.netbsd.org
Dec 19, 2000FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), whichCVE-2000-0916 · Other software · Freebsd · reported by MITREHigh 7.5
FreeBSD 4.1.1 and earlier, and possibly other BSD-based OSes, uses an insufficient random number generator to generate initial TCP sequence numbers (ISN), which allows remote attackers to spoof TCP connections.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org securityfocus.com
Dec 11, 2000The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.CVE-2000-1013 · Other software · Freebsd · reported by MITREHigh 7.2
The setlocale function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.freebsd.org
Dec 11, 2000Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.CVE-2000-0998 · Other software · Freebsd · reported by MITREHigh 7.2
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" function.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.openbsd.org
Dec 11, 2000Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental vCVE-2000-1011 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Dec 11, 2000The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.CVE-2000-1012 · Other software · Freebsd · reported by MITREHigh 7.2
The catopen function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to read arbitrary files via the LANG environmental variable.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.freebsd.org
Dec 11, 2000The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNCVE-2000-1066 · Other software · Freebsd · reported by MITREMedium 5
The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org securityfocus.com
Nov 14, 2000Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.CVE-2000-0852 · Other software · Freebsd · reported by MITREHigh 7.2
Multiple buffer overflows in eject on FreeBSD and possibly other OSes allows local users to gain root privileges.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
Oct 20, 2000Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux sCVE-2000-0749 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in the Linux binary compatibility module in FreeBSD 3.x through 5.x allows local users to gain root privileges via long filenames in the linux shadow file system.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
Oct 20, 2000Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.CVE-2000-0752 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflows in brouted in FreeBSD and possibly other OSes allows local users to gain root privileges via long command line arguments.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Oct 20, 2000FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.CVE-2000-0729 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD 5.x, 4.x, and 3.x allows local users to cause a denial of service by executing a program with a malformed ELF image header.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
Sep 16, 2000Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.CVE-1999-0761 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Jul 5, 2000libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands bCVE-2000-0595 · Other software · Freebsd · reported by MITREMedium 4.6
libedit searches for the .editrc file in the current directory instead of the user's home directory, which may allow local users to execute arbitrary commands by installing a modified .editrc in another directory.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
Jun 12, 2000OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systCVE-2000-0535 · Websites & servers · Openssl · reported by MITREMedium 5
OpenSSL 0.9.4 and OpenSSH for FreeBSD do not properly check for the existence of the /dev/random or /dev/urandom devices, which are absent on FreeBSD Alpha systems, which causes them to produce weak keys which may be more easily broken.
Product
Openssl
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com securityfocus.com
Jun 7, 2000A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722CVE-2000-0532 · Other software · Freebsd · reported by MITREHigh 7.5
A FreeBSD patch for SSH on 2000-01-14 configures ssh to listen on port 722 as well as port 22, which might allow remote attackers to access SSH through port 722 even if port 22 is otherwise filtered.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record archives.neohapsis.com osvdb.org
Jun 7, 2000The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd uCVE-2000-0534 · Other software · APS Filter Development Team · reported by MITREMedium 4.6
The apsfilter software in the FreeBSD ports package does not properly read user filter configurations, which allows local users to execute commands as the lpd user.
Product
Apsfilter
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
May 29, 2000The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by CVE-2000-0461 · Other software · Freebsd · reported by MITRELow 2.1
The undocumented semconfig system call in BSD freezes the state of semaphores, which allows local users to cause a denial of service of the semaphore system by using the semconfig call.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org ftp.netbsd.org
May 17, 2000xsoldier program allows local users to gain root access via a long argument.CVE-1999-1008 · Other software · Freebsd · reported by MITREHigh 7.2
xsoldier program allows local users to gain root access via a long argument.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info securityfocus.com
May 9, 2000The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.CVE-2000-0387 · Other software · Alexander Siegel · reported by MITRELow 2.1
The makelev program in the golddig game from the FreeBSD ports collection allows local users to overwrite arbitrary files.
Product
Golddig
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org securityfocus.com
May 1, 2000NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.CVE-2000-0440 · Other software · Freebsd · reported by MITREMedium 5
NetBSD 1.4.2 and earlier allows remote attackers to cause a denial of service by sending a packet with an unaligned IP timestamp option.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.netbsd.org archives.neohapsis.com
Apr 10, 2000Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.CVE-2000-0294 · Other software · JIM Housley · reported by MITREHigh 7.2
Buffer overflow in healthd for FreeBSD allows local users to gain root privileges.
Product
Healthd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Mar 27, 2000Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.CVE-2000-0235 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org osvdb.org
Feb 28, 2000Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.CVE-2000-0186 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record redhat.com securityfocus.com
Feb 21, 2000asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.CVE-2000-0163 · Other software · Freebsd · reported by MITREMedium 4.6
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Jan 19, 2000The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.CVE-2000-0092 · Other software · Freebsd · reported by MITREMedium 6.2
The BSD make program allows local users to modify files via a symlink attack when the -j option is being used.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record ftp.freebsd.org securityfocus.com
Jan 1, 2000Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.CVE-1999-0964 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org osvdb.org
Dec 31, 1999Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to CVE-1999-1339 · Other software · Freebsd · reported by MITREMedium 5
Vulnerability when Network Address Translation (NAT) is enabled in Linux 2.2.10 and earlier with ipchains, or FreeBSD 3.2 with ipfw, allows remote attackers to cause a denial of service (kernel panic) via a ping -R (record route) command.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info marc.info
Dec 22, 1999wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.CVE-2000-0018 · Other software · Windowmaker · reported by MITREHigh 7.2
wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.
Product
Wmmon
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Dec 1, 1999Buffer overflow in FreeBSD gdc program.CVE-1999-0855 · Other software · Freebsd · reported by MITREHigh 7.2
Buffer overflow in FreeBSD gdc program.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Dec 1, 1999FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.CVE-1999-0820 · Other software · Freebsd · reported by MITREMedium 4.6
FreeBSD seyon allows users to gain privileges via a modified PATH variable for finding the xterm and seyon-emu commands.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Dec 1, 1999Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.CVE-1999-0823 · Other software · Freebsd · reported by MITREMedium 4.6
Buffer overflow in FreeBSD xmindpath allows local users to gain privileges via -f argument.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Dec 1, 1999Buffer overflow in FreeBSD angband allows local users to gain privileges.CVE-1999-0826 · Other software · Freebsd · reported by MITREMedium 4.6
Buffer overflow in FreeBSD angband allows local users to gain privileges.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Dec 1, 1999FreeBSD gdc program allows local users to modify files via a symlink attack.CVE-1999-0857 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD gdc program allows local users to modify files via a symlink attack.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Dec 1, 1999FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.CVE-1999-0963 · Other software · Freebsd · reported by MITREHigh 7.2
FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org osvdb.org
Nov 8, 1999Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.CVE-1999-0863 · Other software · Freebsd · reported by MITREMedium 4.6
Buffer overflow in FreeBSD seyon via HOME environmental variable, -emulator argument, -modems argument, or the GUI.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record exchange.xforce.ibmcloud.com exchange.xforce.ibmcloud.com
Nov 8, 1999FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.CVE-1999-0821 · Other software · Freebsd · reported by MITREMedium 4.6
FreeBSD seyon allows local users to gain privileges by providing a malicious program in the -emulator argument.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Nov 1, 1999runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary CVE-1999-1517 · Other software · Freebsd · reported by MITREHigh 7.2
runtar in the Amanda backup system used in various UNIX operating systems executes tar with root privileges, which allows a user to overwrite or read arbitrary files by providing the target files to runtar.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info securityfocus.com
Sep 22, 1999FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.CVE-1999-0912 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD VFS cache (vfs_cache) allows local users to cause a denial of service by opening a large number of files.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record osvdb.org securityfocus.com
Sep 5, 1999FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a CVE-2000-0489 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD, NetBSD, and OpenBSD allow an attacker to cause a denial of service by creating a large number of socket pairs using the socketpair function, setting a large buffer size via setsockopt, then writing large buffers.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Sep 2, 1999FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory froCVE-1999-1564 · Other software · Freebsd · reported by MITRELow 2.1
FreeBSD 3.2 and possibly other versions allows a local user to cause a denial of service (panic) with a large number accesses of an NFS v3 mounted directory from a large number of processes.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record securityfocus.com securityfocus.com
Jul 15, 1999Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specifCVE-1999-1518 · Other software · Freebsd · reported by MITREMedium 5
Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limits (e.g., as specified with rlimits) using mmap or shmget to allocate memory and cause page faults.
Product
Freebsd
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record marc.info securityfocus.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.