Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 1 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
474new WordPress flaws this week
390,714entries in the database

1,281 results · page 14 of 26

  • Feb 17, 2024Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.CVE-2023-52370 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    Stack overflow vulnerability in the network acceleration module.Successful exploitation of this vulnerability may cause unauthorized file access.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.CVE-2023-52369 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Stack overflow vulnerability in the NFC module.Successful exploitation of this vulnerability may affect service availability and integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-52368 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrityCVE-2023-52367 · Other software · Huawei · reported by psirt@huawei.comHigh 7.7

    Vulnerability of improper access control in the media library module.Successful exploitation of this vulnerability may affect service availability and integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormallyCVE-2023-52366 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Resource reuse vulnerability in the GPU module.CVE-2023-52387 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Resource reuse vulnerability in the GPU module. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormallyCVE-2023-52365 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to bCVE-2023-52363 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Vulnerability of defects introduced in the design process in the Control Panel module.Successful exploitation of this vulnerability may cause app processes to be started by mistake.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52362 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.CVE-2023-52361 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    The VerifiedBoot module has a vulnerability that may cause authentication errors.Successful exploitation of this vulnerability may affect integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.CVE-2023-52360 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Logic vulnerabilities in the baseband.Successful exploitation of this vulnerability may affect service integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-52358 · Other software · Huawei · reported by psirt@huawei.comMedium 6.2

    Vulnerability of configuration defects in some APIs of the audio module.Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.CVE-2023-52357 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2024Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentialiCVE-2023-52097 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 14, 2024 CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication.CVE-2024-0568 · Other software · Schneider Electric · reported by cybersecurity@se.comHigh 8.8

    CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication.

    Product
    Harmony Control Relay RMNF22TB30
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.CVE-2024-21863 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4.7

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.CVE-2024-21860 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.2

    in OpenHarmony v4.0.0 and prior versions allow an adjacent attacker arbitrary code execution in any apps through use after free.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.CVE-2024-21851 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 2.9

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.CVE-2024-21845 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 2.9

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause heap overflow through integer overflow.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.CVE-2024-0285 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4.7

    in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through improper input.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.CVE-2023-49118 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 2.9

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write.CVE-2023-45734 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4.2

    in OpenHarmony v3.2.4 and prior versions allow an adjacent attacker arbitrary code execution through out-of-bounds write.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 2, 2024 in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.CVE-2023-43756 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 2.9

    in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of permission verification for APIs in the DownloadProviderMain module.CVE-2023-52106 · Other software · Huawei · reported by psirt@huawei.comMedium 4.4

    Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024The nearby module has a privilege escalation vulnerability.CVE-2023-52105 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    The nearby module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of parameters being not verified in the WMS module.CVE-2023-52104 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Buffer overflow vulnerability in the FLP module.CVE-2023-52103 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of parameters being not verified in the WMS module.CVE-2023-52102 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Component exposure vulnerability in the Wi-Fi module.CVE-2023-52101 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024The Celia Keyboard module has a vulnerability in access control.CVE-2023-52100 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of foreground service restrictions being bypassed in the NMS module.CVE-2023-52099 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Permission management vulnerability in the multi-screen interaction module.CVE-2023-52116 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024The iaware module has a Use-After-Free (UAF) vulnerability.CVE-2023-52115 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Data confidentiality vulnerability in the ScreenReader module.CVE-2023-52114 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of process priorities being raised in the ActivityManagerService module.CVE-2023-52108 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of permissions being not strictly verified in the WMS module.CVE-2023-52107 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Denial of Service (DoS) vulnerability in the DMS module.CVE-2023-52098 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024launchAnyWhere vulnerability in the ActivityManagerService module.CVE-2023-52113 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Unauthorized file access vulnerability in the wallpaper service module.CVE-2023-52112 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Authorization vulnerability in the BootLoader module.CVE-2023-52111 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.CVE-2023-52110 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-52109 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-4566 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Vulnerability of trust relationships being inaccurate in distributed scenarios.CVE-2023-44117 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 16, 2024Out-of-bounds access vulnerability in the device authentication module.CVE-2023-44112 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.

    Product
    HarmonyOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 2, 2024 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.CVE-2023-49142 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia audio crash through modify a released pointer.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 2, 2024 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.CVE-2023-49135 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 2, 2024 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.CVE-2023-48360 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia player crash through modify a released pointer.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 2, 2024 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.CVE-2023-47857 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 4

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause multimedia camera crash through modify a released pointer.

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 2, 2024 in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources CVE-2023-47216 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 2.9

    in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through occupy all resources

    Product
    OpenHarmony
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.