Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,281 results · page 16 of 26
Oct 11, 2023Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perCVE-2023-44105 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44111 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-44110 · Other software · Huawei · reported by psirt@huawei.comMedium 4.3
Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.CVE-2023-44106 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44104 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44103 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailaCVE-2023-44102 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentialCVE-2023-44101 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 11, 2023Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44100 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comhttps
Oct 11, 2023Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44097 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of the permission to access device SNs being improperly managed.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.CVE-2023-44095 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Use-After-Free (UAF) vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to thCVE-2023-41304 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44109 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023 Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44096 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-44094 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Oct 11, 2023Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentCVE-2023-44093 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Broadcast permission control vulnerability in the framework module.CVE-2023-4565 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Permission control vulnerability in the audio module.CVE-2023-41312 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Permission control vulnerability in the audio module.CVE-2023-41311 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Keep-alive vulnerability in the sticky broadcast mechanism.CVE-2023-41310 · Other software · Huawei · reported by psirt@huawei.comLow 3.3
Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Permission control vulnerability in the MediaPlaybackController module.CVE-2023-41309 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Screenshot vulnerability in the input module.CVE-2023-41308 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Memory overwriting vulnerability in the security module.CVE-2023-41307 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Vulnerability of mutex management in the bone voice ID trusted application (TA) module.CVE-2023-41306 · Other software · Huawei · reported by psirt@huawei.comLow 3.7
Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module.CVE-2023-41305 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 27, 2023Stability-related vulnerability in the binder background management and control module.CVE-2022-48606 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Stability-related vulnerability in the binder background management and control module. Successful exploitation of this vulnerability may affect availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Command injection vulnerability in the distributed file system module.CVE-2023-41303 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevice.harmonyos.comhttps
Sep 25, 2023Redirection permission verification vulnerability in the home screen module.CVE-2023-41302 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of unauthorized API access in the PMS module.CVE-2023-41301 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of parameters not being strictly verified in the PMS module.CVE-2023-41300 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Data security classification vulnerability in the DDMP module.CVE-2023-41293 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Input verification vulnerability in the fingerprint module.CVE-2022-48605 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-41299 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of permission control in the window module.CVE-2023-41298 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of defects introduced in the design process in the HiviewTunner module.CVE-2023-41297 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of missing authorization in the kernel module.CVE-2023-41296 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023Vulnerability of improper permission management in the displayengine module.CVE-2023-41295 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
Vulnerability of improper permission management in the displayengine module. Successful exploitation of this vulnerability may cause the screen to turn dim.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.CVE-2023-41294 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevice.harmonyos.comdevice.harmonyos.com
Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-39409 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023DoS vulnerability in the PMS module.CVE-2023-39408 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 25, 2023The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.CVE-2023-39407 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevice.harmonyos.comdevice.harmonyos.com
Sep 21, 2023OpenHarmony v3.2.1 and prior version has a system call function usage error.CVE-2023-4753 · Other software · OpenHarmony · reported by scy@openharmony.ioLow 3.9
OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the error input.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 13, 2023Permission control vulnerability in the XLayout component.CVE-2023-39406 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Vulnerability of input parameter verification in certain APIs in the window management module.CVE-2023-39404 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39403 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39402 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39401 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39400 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39399 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 13, 2023Parameter verification vulnerability in the installd module.CVE-2023-39398 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.