Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell: two critical PHP flaws affect most WordPress hosting. See if your site is affectedFlagged by our vulnerability database: PHP2Shell, two critical PHP flaws. DetailsFlagged: PHP2Shell. Check your site
HuttenlocherTechnologies
843-331-6339
Start a project →
Updated 1 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,754exploited flaws on CISA’s list
33added in the last 30 days
314new WordPress flaws this week
13,899entries in the database

1,754 results · page 13 of 36

  • Aug 21, 2024Linux Kernel Heap-Based Buffer Overflow VulnerabilityCVE-2022-0185 · Computers, phones & browsers · LinuxExploited

    Linux kernel contains a heap-based buffer overflow vulnerability in the legacy_parse_param function in the Filesystem Context functionality. This allows an attacker to open a filesystem that does not support the Filesystem Context API and ultimately escalate privileges.

    Product
    Kernel
    On CISA’s list since
    Aug 21, 2024 (federal fix deadline Sep 11, 2024)
    What to do
    Attackers are using this now. Install Linux’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 21, 2024Dahua IP Camera Authentication Bypass VulnerabilityCVE-2021-33045 · Network & remote access · DahuaExploited

    Dahua IP cameras and related products contain an authentication bypass vulnerability when the loopback device is specified by the client during authentication.

    Product
    IP Camera Firmware
    On CISA’s list since
    Aug 21, 2024 (federal fix deadline Sep 11, 2024)
    What to do
    Attackers are using this now. Install Dahua’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 21, 2024Dahua IP Camera Authentication Bypass VulnerabilityCVE-2021-33044 · Network & remote access · DahuaExploited

    Dahua IP cameras and related products contain an authentication bypass vulnerability when the NetKeyboard type argument is specified by the client during authentication.

    Product
    IP Camera Firmware
    On CISA’s list since
    Aug 21, 2024 (federal fix deadline Sep 11, 2024)
    What to do
    Attackers are using this now. Install Dahua’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 19, 2024Jenkins Command Line Interface (CLI) Path Traversal VulnerabilityCVE-2024-23897 · Websites & servers · JenkinsExploitedRansomware

    Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution.

    Product
    Jenkins Command Line Interface (CLI)
    On CISA’s list since
    Aug 19, 2024 (federal fix deadline Sep 9, 2024)
    What to do
    Attackers are using this now. Install Jenkins’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 15, 2024SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityCVE-2024-28986 · Other software · SolarWindsExploited

    SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

    Product
    Web Help Desk
    On CISA’s list since
    Aug 15, 2024 (federal fix deadline Sep 5, 2024)
    What to do
    Attackers are using this now. Install SolarWinds’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Windows Power Dependency Coordinator Privilege Escalation VulnerabilityCVE-2024-38107 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Power Dependency Coordinator contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to obtain SYSTEM privileges.

    Product
    Windows
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Windows Kernel Privilege Escalation VulnerabilityCVE-2024-38106 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Kernel contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Successful exploitation of this vulnerability requires an attacker to win a race condition.

    Product
    Windows
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation VulnerabilityCVE-2024-38193 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Ancillary Function Driver for WinSock contains an unspecified vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

    Product
    Windows
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2024-38213 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the SmartScreen user experience via a malicious file.

    Product
    Windows
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Windows Scripting Engine Memory Corruption VulnerabilityCVE-2024-38178 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL.

    Product
    Windows
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 13, 2024Microsoft Project Remote Code Execution Vulnerability CVE-2024-38189 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Project contains an unspecified vulnerability that allows for remote code execution via a malicious file.

    Product
    Project
    On CISA’s list since
    Aug 13, 2024 (federal fix deadline Sep 3, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 7, 2024Apache OFBiz Path Traversal VulnerabilityCVE-2024-32113 · Websites & servers · ApacheExploited

    Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution.

    Product
    OFBiz
    On CISA’s list since
    Aug 7, 2024 (federal fix deadline Aug 28, 2024)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 7, 2024Android Kernel Remote Code Execution VulnerabilityCVE-2024-36971 · Computers, phones & browsers · AndroidExploited

    Android contains an unspecified vulnerability in the kernel that allows for remote code execution. This vulnerability resides in Linux Kernel and could impact other products, including but not limited to Android OS.

    Product
    Kernel
    On CISA’s list since
    Aug 7, 2024 (federal fix deadline Aug 28, 2024)
    What to do
    Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Aug 5, 2024Microsoft COM for Windows Deserialization of Untrusted Data VulnerabilityCVE-2018-0824 · Computers, phones & browsers · MicrosoftExploited

    Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script.

    Product
    Windows
    On CISA’s list since
    Aug 5, 2024 (federal fix deadline Aug 26, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 30, 2024VMware ESXi Authentication Bypass VulnerabilityCVE-2024-37085 · Other software · VMwareExploitedRansomware

    VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD.

    Product
    ESXi
    On CISA’s list since
    Jul 30, 2024 (federal fix deadline Aug 20, 2024)
    What to do
    Attackers are using this now. Install VMware’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 29, 2024Acronis Cyber Infrastructure (ACI) Insecure Default Password VulnerabilityCVE-2023-45249 · Other software · AcronisExploited

    Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.

    Product
    Cyber Infrastructure (ACI)
    On CISA’s list since
    Jul 29, 2024 (federal fix deadline Aug 19, 2024)
    What to do
    Attackers are using this now. Install Acronis’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 29, 2024ServiceNow Incomplete List of Disallowed Inputs VulnerabilityCVE-2024-5217 · Other software · ServiceNowExploited

    ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.

    Product
    Utah, Vancouver, and Washington DC Now Platform
    On CISA’s list since
    Jul 29, 2024 (federal fix deadline Aug 19, 2024)
    What to do
    Attackers are using this now. Install ServiceNow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 29, 2024ServiceNow Improper Input Validation VulnerabilityCVE-2024-4879 · Other software · ServiceNowExploited

    ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely.

    Product
    Utah, Vancouver, and Washington DC Now Platform
    On CISA’s list since
    Jul 29, 2024 (federal fix deadline Aug 19, 2024)
    What to do
    Attackers are using this now. Install ServiceNow’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 23, 2024Twilio Authy Information Disclosure VulnerabilityCVE-2024-39891 · Other software · TwilioExploited

    Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy.

    Product
    Authy
    On CISA’s list since
    Jul 23, 2024 (federal fix deadline Aug 13, 2024)
    What to do
    Attackers are using this now. Install Twilio’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 23, 2024Microsoft Internet Explorer Use-After-Free VulnerabilityCVE-2012-4792 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object.

    Product
    Internet Explorer
    On CISA’s list since
    Jul 23, 2024 (federal fix deadline Aug 13, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 17, 2024VMware vCenter Server Incorrect Default File Permissions Vulnerability CVE-2022-22948 · Other software · VMwareExploited

    VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information.

    Product
    vCenter Server
    On CISA’s list since
    Jul 17, 2024 (federal fix deadline Aug 7, 2024)
    What to do
    Attackers are using this now. Install VMware’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 17, 2024Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) VulnerabilityCVE-2024-34102 · Websites & servers · AdobeExploited

    Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.

    Product
    Commerce and Magento Open Source
    On CISA’s list since
    Jul 17, 2024 (federal fix deadline Aug 7, 2024)
    What to do
    Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 17, 2024SolarWinds Serv-U Path Traversal Vulnerability CVE-2024-28995 · Other software · SolarWindsExploited

    SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.

    Product
    Serv-U
    On CISA’s list since
    Jul 17, 2024 (federal fix deadline Aug 7, 2024)
    What to do
    Attackers are using this now. Install SolarWinds’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 15, 2024OSGeo GeoServer GeoTools Eval Injection VulnerabilityCVE-2024-36401 · Other software · OSGeoExploited

    OSGeo GeoServer GeoTools contains an improper neutralization of directives in dynamically evaluated code vulnerability due to unsafely evaluating property names as XPath expressions. This allows unauthenticated attackers to conduct remote code execution via specially crafted input.

    Product
    GeoServer
    On CISA’s list since
    Jul 15, 2024 (federal fix deadline Aug 5, 2024)
    What to do
    Attackers are using this now. Install OSGeo’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 9, 2024Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityCVE-2024-23692 · Other software · RejettoExploitedRansomware

    Rejetto HTTP File Server contains an improper neutralization of special elements used in a template engine vulnerability. This allows a remote, unauthenticated attacker to execute commands on the affected system by sending a specially crafted HTTP request.

    Product
    HTTP File Server
    On CISA’s list since
    Jul 9, 2024 (federal fix deadline Jul 30, 2024)
    What to do
    Attackers are using this now. Install Rejetto’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 9, 2024Microsoft Windows Hyper-V Privilege Escalation VulnerabilityCVE-2024-38080 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows Hyper-V contains a privilege escalation vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

    Product
    Windows
    On CISA’s list since
    Jul 9, 2024 (federal fix deadline Jul 30, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 9, 2024Microsoft Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-38112 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows MSHTML Platform contains a spoofing vulnerability that has a high impact to confidentiality, integrity, and availability.

    Product
    Windows
    On CISA’s list since
    Jul 9, 2024 (federal fix deadline Jul 30, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jul 2, 2024Cisco NX-OS Command Injection VulnerabilityCVE-2024-20399 · Network & remote access · CiscoExploited

    Cisco NX-OS contains a command injection vulnerability in the command line interface (CLI) that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device.

    Product
    NX-OS
    On CISA’s list since
    Jul 2, 2024 (federal fix deadline Jul 23, 2024)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 26, 2024Roundcube Webmail Cross-Site Scripting (XSS) VulnerabilityCVE-2020-13965 · Websites & servers · RoundcubeExploited

    Roundcube Webmail contains a cross-site scripting (XSS) vulnerability that allows a remote attacker to manipulate data via a malicious XML attachment.

    Product
    Webmail
    On CISA’s list since
    Jun 26, 2024 (federal fix deadline Jul 17, 2024)
    What to do
    Attackers are using this now. Install Roundcube’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 26, 2024Linux Kernel Use-After-Free VulnerabilityCVE-2022-2586 · Computers, phones & browsers · LinuxExploited

    Linux Kernel contains a use-after-free vulnerability in the nft_object, allowing local attackers to escalate privileges.

    Product
    Kernel
    On CISA’s list since
    Jun 26, 2024 (federal fix deadline Jul 17, 2024)
    What to do
    Attackers are using this now. Install Linux’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 26, 2024OSGeo GeoServer JAI-EXT Code Injection VulnerabilityCVE-2022-24816 · Other software · OSGeoExploited

    OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution.

    Product
    JAI-EXT
    On CISA’s list since
    Jun 26, 2024 (federal fix deadline Jul 17, 2024)
    What to do
    Attackers are using this now. Install OSGeo’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 13, 2024Progress Telerik Report Server Authentication Bypass by Spoofing VulnerabilityCVE-2024-4358 · Other software · ProgressExploited

    Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.

    Product
    Telerik Report Server
    On CISA’s list since
    Jun 13, 2024 (federal fix deadline Jul 4, 2024)
    What to do
    Attackers are using this now. Install Progress’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 13, 2024Microsoft Windows Error Reporting Service Improper Privilege Management VulnerabilityCVE-2024-26169 · Computers, phones & browsers · MicrosoftExploitedRansomware

    Microsoft Windows Error Reporting Service contains an improper privilege management vulnerability that allows a local attacker with user permissions to gain SYSTEM privileges.

    Product
    Windows
    On CISA’s list since
    Jun 13, 2024 (federal fix deadline Jul 4, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 13, 2024Android Pixel Privilege Escalation VulnerabilityCVE-2024-32896 · Computers, phones & browsers · AndroidExploited

    Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation.

    Product
    Pixel
    On CISA’s list since
    Jun 13, 2024 (federal fix deadline Jul 4, 2024)
    What to do
    Attackers are using this now. Install Android’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 12, 2024PHP-CGI OS Command Injection VulnerabilityCVE-2024-4577 · Websites & servers · PHP GroupExploitedRansomware

    PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823.

    Product
    PHP
    On CISA’s list since
    Jun 12, 2024 (federal fix deadline Jul 3, 2024)
    What to do
    Attackers are using this now. Install PHP Group’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 12, 2024Arm Mali GPU Kernel Driver Use-After-Free VulnerabilityCVE-2024-4610 · Computers, phones & browsers · ArmExploited

    Arm Bifrost and Valhall GPU kernel drivers contain a use-after-free vulnerability that allows a local, non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.

    Product
    Mali GPU Kernel Driver
    On CISA’s list since
    Jun 12, 2024 (federal fix deadline Jul 3, 2024)
    What to do
    Attackers are using this now. Install Arm’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Jun 3, 2024Oracle WebLogic Server OS Command Injection VulnerabilityCVE-2017-3506 · Websites & servers · OracleExploited

    Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document.

    Product
    WebLogic Server
    On CISA’s list since
    Jun 3, 2024 (federal fix deadline Jun 24, 2024)
    What to do
    Attackers are using this now. Install Oracle’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 30, 2024Linux Kernel Use-After-Free VulnerabilityCVE-2024-1086 · Computers, phones & browsers · LinuxExploitedRansomware

    Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.

    Product
    Kernel
    On CISA’s list since
    May 30, 2024 (federal fix deadline Jun 20, 2024)
    What to do
    Attackers are using this now. Install Linux’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 30, 2024Check Point Quantum Security Gateways Information Disclosure VulnerabilityCVE-2024-24919 · Network & remote access · Check PointExploitedRansomware

    Check Point Quantum Security Gateways contain an unspecified information disclosure vulnerability. The vulnerability potentially allows an attacker to access information on Gateways connected to the internet, with IPSec VPN, Remote Access VPN or Mobile Access enabled. This issue affects several product lines from Check Point, including CloudGuard Network, Quantum Scalable Chassis, Quantum Security Gateways, and Quantum Spark Appliances.

    Product
    Quantum Security Gateways
    On CISA’s list since
    May 30, 2024 (federal fix deadline Jun 20, 2024)
    What to do
    Attackers are using this now. Install Check Point’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 29, 2024Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code VulnerabilityCVE-2024-4978 · Other software · Justice AV SolutionsExploited

    Justice AV Solutions (JAVS) Viewer installer contains a malicious version of ffmpeg.exe, named fffmpeg.exe (SHA256: 421a4ad2615941b177b6ec4ab5e239c14e62af2ab07c6df1741e2a62223223c4). When run, this creates a backdoor connection to a malicious C2 server.

    Product
    Viewer
    On CISA’s list since
    May 29, 2024 (federal fix deadline Jun 19, 2024)
    What to do
    Attackers are using this now. Install Justice AV Solutions’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 28, 2024Google Chromium V8 Type Confusion VulnerabilityCVE-2024-5274 · Computers, phones & browsers · GoogleExploited

    Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Product
    Chromium V8
    On CISA’s list since
    May 28, 2024 (federal fix deadline Jun 18, 2024)
    What to do
    Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 23, 2024Apache Flink Improper Access Control VulnerabilityCVE-2020-17519 · Websites & servers · ApacheExploited

    Apache Flink contains an improper access control vulnerability that allows an attacker to read any file on the local filesystem of the JobManager through its REST interface.

    Product
    Flink
    On CISA’s list since
    May 23, 2024 (federal fix deadline Jun 13, 2024)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 20, 2024Google Chromium V8 Type Confusion VulnerabilityCVE-2024-4947 · Computers, phones & browsers · GoogleExploited

    Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.

    Product
    Chromium V8
    On CISA’s list since
    May 20, 2024 (federal fix deadline Jun 10, 2024)
    What to do
    Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 20, 2024NextGen Healthcare Mirth Connect Deserialization of Untrusted Data VulnerabilityCVE-2023-43208 · Other software · NextGen HealthcareExploitedRansomware

    NextGen Healthcare Mirth Connect contains a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution via a specially crafted request.

    Product
    Mirth Connect
    On CISA’s list since
    May 20, 2024 (federal fix deadline Jun 10, 2024)
    What to do
    Attackers are using this now. Install NextGen Healthcare’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 16, 2024Google Chromium V8 Out-of-Bounds Memory Write VulnerabilityCVE-2024-4761 · Computers, phones & browsers · GoogleExploited

    Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Product
    Chromium V8
    On CISA’s list since
    May 16, 2024 (federal fix deadline Jun 6, 2024)
    What to do
    Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 16, 2024D-Link DIR-605 Router Information Disclosure VulnerabilityCVE-2021-40655 · Network & remote access · D-LinkExploited

    D-Link DIR-605 routers contain an information disclosure vulnerability that allows attackers to obtain a username and password by forging a post request to the /getcfg.php page.

    Product
    DIR-605 Router
    On CISA’s list since
    May 16, 2024 (federal fix deadline Jun 6, 2024)
    What to do
    Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 16, 2024D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) VulnerabilityCVE-2014-100005 · Network & remote access · D-LinkExploited

    D-Link DIR-600 routers contain a cross-site request forgery (CSRF) vulnerability that allows an attacker to change router configurations by hijacking an existing administrator session.

    Product
    DIR-600 Router
    On CISA’s list since
    May 16, 2024 (federal fix deadline Jun 6, 2024)
    What to do
    Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 14, 2024Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityCVE-2024-30040 · Computers, phones & browsers · MicrosoftExploited

    Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for a security feature bypass.

    Product
    Windows
    On CISA’s list since
    May 14, 2024 (federal fix deadline Jun 4, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 14, 2024 Microsoft DWM Core Library Privilege Escalation VulnerabilityCVE-2024-30051 · Computers, phones & browsers · MicrosoftExploitedRansomware

    Microsoft DWM Core Library contains a privilege escalation vulnerability that allows an attacker to gain SYSTEM privileges.

    Product
    DWM Core Library
    On CISA’s list since
    May 14, 2024 (federal fix deadline Jun 4, 2024)
    What to do
    Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • May 13, 2024Google Chromium Visuals Use-After-Free VulnerabilityCVE-2024-4671 · Computers, phones & browsers · GoogleExploited

    Google Chromium Visuals contains a use-after-free vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

    Product
    Chromium
    On CISA’s list since
    May 13, 2024 (federal fix deadline Jun 3, 2024)
    What to do
    Attackers are using this now. Install Google’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?

No newsletter, no sales sequence. Just a reply.