Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 5 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
324new WordPress flaws this week
390,007entries in the database

87 results · page 2 of 2

  • Mar 12, 2020Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authentiCVE-2020-0520 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escaCVE-2020-0519 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or dCVE-2020-0517 · Other software · Intel · reported by secure@intel.comMedium 5.3

    Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via lCVE-2020-0516 · Other software · Intel · reported by secure@intel.comMedium 5.5

    Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, andCVE-2020-0515 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to CVE-2020-0514 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial ofCVE-2020-0511 · Other software · Intel · reported by secure@intel.comMedium 5.5

    Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.CVE-2020-0508 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an aCVE-2020-0507 · Other software · Intel · reported by secure@intel.comMedium 4.4

    Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentiallyCVE-2020-0506 · Other software · Intel · reported by secure@intel.comLow 2.3

    Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of service via local access.

    Product
    Intel(R) Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow CVE-2020-0505 · Other software · Intel · reported by secure@intel.comMedium 6.1

    Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure and denial of service via local

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enaCVE-2020-0504 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege and denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure CVE-2020-0503 · Other software · Intel · reported by secure@intel.comMedium 5.5

    Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilegeCVE-2020-0502 · Other software · Intel · reported by secure@intel.comMedium 5.3

    Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2020Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local aCVE-2020-0501 · Other software · Intel · reported by secure@intel.comMedium 5.5

    Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access.

    Product
    Intel(R) Graphics Drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2020A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.CVE-2012-0951 · Other software · NVIDIA · reported by security@ubuntu.comHigh 7.8

    A Memory Corruption Vulnerability exists in NVIDIA Graphics Drivers 29549 due to an unknown function in the file proc/driver/nvidia/registry.

    Product
    graphics drivers
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2019Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentCVE-2019-11111 · Other software · Intel · reported by secure@intel.comHigh 7.8

    Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.

    Product
    Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 23, 2019The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux.CVE-2019-11693 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgCritical 9.8

    The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. *Note: this issue only occurs on Linux. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

    Product
    Thunderbird
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 17, 2019A race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated usCVE-2019-0114 · Other software · Intel · reported by secure@intel.comMedium 4.7

    A race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.

    Product
    Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 17, 2019Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authCVE-2019-0113 · Other software · Intel · reported by secure@intel.comMedium 5.5

    Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.

    Product
    Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 2018Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 CVE-2018-12154 · Other software · Intel Corporation · reported by secure@intel.comMedium 5.5

    Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user to potentially create an infinite loop and crash an application via local access.

    Product
    Intel Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 10, 2018Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 CVE-2018-12153 · Other software · Intel Corporation · reported by secure@intel.comMedium 6.5

    Denial of Service in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unprivileged user from a virtual machine guest to potentially crash the host system via local access.

    Product
    Intel Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 10, 2018Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058CVE-2018-12152 · Other software · Intel Corporation · reported by secure@intel.comHigh 7.8

    Pointer corruption in Unified Shader Compiler in Intel Graphics Drivers before 10.18.x.5056 (aka 15.33.x.5056), 10.18.x.5057 (aka 15.36.x.5057) and 20.19.x.5058 (aka 15.40.x.5058) may allow an unauthenticated remote user to potentially execute arbitrary WebGL code via local access.

    Product
    Intel Graphics Driver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 21, 2016The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecifiCVE-2016-4634 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The Graphics Drivers subsystem in Apple OS X before 10.11.6 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 19, 2016The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of serviCVE-2016-1861 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1846.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 20, 2016The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a CVE-2016-1846 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The nvCommandQueue::GetHandleIndex method in the NVIDIA Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference and memory corruption) via a crafted app.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 20, 2016The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memCVE-2016-1810 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The Graphics Drivers subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 13, 2016Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRCVE-2016-1495 · Other software · Huawei · reported by MITREHigh 7.8

    Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, which triggers a heap-based buffer overflow.

    Product
    Mate S Firmware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 23, 2016The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a deCVE-2016-1744 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 23, 2016The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a deCVE-2016-1743 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.8

    The Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1744.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 23, 2016The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a dCVE-2016-1741 · Computers, phones & browsers · Apple · reported by product-security@apple.comCritical 9.8

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 23, 2015The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unCVE-2015-7021 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 7.2

    The Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to gain privileges or cause a denial of service (kernel memory corruption) via unspecified vectors.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 23, 2015The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause CVE-2015-7020 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 5.6

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7019.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 23, 2015The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause CVE-2015-7019 · Computers, phones & browsers · Apple · reported by product-security@apple.comMedium 5.6

    The NVIDIA driver in the Graphics Drivers subsystem in Apple OS X before 10.11.1 allows local users to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read and system crash) via unspecified vectors, a different vulnerability than CVE-2015-7020.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 1, 2014Graphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a CVE-2014-1379 · Computers, phones & browsers · Apple · reported by product-security@apple.comHigh 10

    Graphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a 32-bit executable file for a crafted application.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 18, 2013The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshotCVE-2013-1729 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgLow 2.6

    The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA graphics drivers are used on Mac OS X, allows remote attackers to obtain desktop-screenshot data by reading from a CANVAS element.

    Product
    Firefox
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 7, 2012Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a dCVE-2012-5115 · Computers, phones & browsers · Google · reported by chrome-cve-admin@google.comHigh 7.5

    Google Chrome before 23.0.1271.64 on Mac OS X does not properly mitigate improper write behavior in graphics drivers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger "wild writes."

    Product
    Chrome
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.