Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 9 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
456new WordPress flaws this week
390,714entries in the database

85 results · page 2 of 2

  • Oct 27, 2023A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical.CVE-2023-5826 · Other software · Netentsec · reported by VulDBMedium 5.5

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_onlineuser.php. The manipulation of the argument SessionId leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-243716. NOTE: We tried to contact the vendor early about the disclosure but the official mail address was not working properly.

    Product
    NS-ASG Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 26, 2023A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3.CVE-2023-5785 · Other software · Netentsec · reported by VulDBMedium 5.5

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddress_interpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-243591. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

    Product
    NS-ASG Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 26, 2023A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical.CVE-2023-5784 · Other software · Netentsec · reported by VulDBMedium 5.5

    A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243590 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

    Product
    NS-ASG Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 22, 2023A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3.CVE-2023-5700 · Other software · Netentsec · reported by VulDBMedium 5.5

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243138 is the identifier assigned to this vulnerability.

    Product
    NS-ASG Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 20, 2023A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3.CVE-2023-5681 · Other software · Netentsec · reported by VulDBMedium 4.7

    A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_addr_fwresource_ip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-243057 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

    Product
    NS-ASG Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 2023netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control.CVE-2023-40850 · Other software · netentsec · reported by MITREHigh 7.5

    netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway.

    Product
    ns-asg
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 12, 2023In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a loCVE-2023-21245 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8

    In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 5, 2023Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.CVE-2023-30243 · Other software · Netentsec · reported by MITREHigh 7.5

    Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information.

    Product
    Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 5, 2023NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.CVE-2023-30242 · Other software · Netentsec · reported by MITRECritical 9.8

    NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/add_ikev2.php.

    Product
    Application Security Gateway
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2022Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to sCVE-2022-39912 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comMedium 6.2

    Improper handling of insufficient permissions vulnerability in setSecureFolderPolicy in PersonaManagerService prior to Android T(13) allows local attackers to set some setting value in Secure folder.

    Product
    Samsung Mobile Devices
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 26, 2022D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.CVE-2022-43001 · Other software · Dlink · reported by MITRECritical 9.8

    D-Link DIR-816 A2 1.10 B05 was discovered to contain a stack overflow via the pskValue parameter in the setSecurity function.

    Product
    Dir-816 Firmware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 22, 2021A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to rCVE-2021-34699 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 7.7

    A vulnerability in the TrustSec CLI parser of Cisco IOS and Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload. This vulnerability is due to an improper interaction between the web UI and the CLI parser. An attacker could exploit this vulnerability by requesting a particular CLI command to be run through the web UI. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

    Product
    Cisco IOS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 22, 2021Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command.CVE-2021-34393 · Other software · NVIDIA · reported by psirt@nvidia.comMedium 4.2

    Trusty contains a vulnerability in TSEC TA which deserializes the incoming messages even though the TSEC TA does not expose any command. This vulnerability might allow an attacker to exploit the deserializer to impact code execution, causing information disclosure.

    Product
    NVIDIA Jetson TX2 series, TX2 NX, AGX Xavier series, Xavier NX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2021Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.CVE-2021-25779 · Other software · Janobe · reported by MITRECritical 9.8

    Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.

    Product
    Baby Care System
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 16, 2021DualShield 5.9.8.0821 allows username enumeration on its login form.CVE-2020-28918 · Other software · Deepnetsecurity · reported by MITREMedium 5.3

    DualShield 5.9.8.0821 allows username enumeration on its login form. A valid username results in prompting for the password, whereas an invalid one will produce an "unknown username" error message.

    Product
    Dualshield
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2019A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remoCVE-2019-12669 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 7.5

    A vulnerability in the RADIUS Change of Authorization (CoA) code of Cisco TrustSec, a feature within Cisco IOS XE Software, could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of a malformed packet. An attacker could exploit this vulnerability by sending a malformed packet to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device.

    Product
    Cisco IOS XE Software 3.2.9SG
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 25, 2019A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remotCVE-2019-12663 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 8.6

    A vulnerability in the Cisco TrustSec (CTS) Protected Access Credential (PAC) provisioning module of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of attributes in RADIUS messages. An attacker could exploit this vulnerability by sending a malicious RADIUS message to an affected device while the device is in a specific state.

    Product
    Cisco IOS XE Software
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 6, 2019A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SeCVE-2019-1003005 · Websites & servers · Jenkins project · reported by jenkinsci-cert@googlegroups.comHigh 8.8

    A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.

    Product
    Jenkins Script Security Plugin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 22, 2019A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandCVE-2019-1003000 · Websites & servers · Jenkins project · reported by jenkinsci-cert@googlegroups.comHigh 8.8

    A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.

    Product
    Script Security Plugin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 18, 2018A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory.CVE-2018-12385 · Computers, phones & browsers · Mozilla · reported by security@mozilla.orgHigh 7

    A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile directory. This issue is only exploitable in combination with another vulnerability allowing an attacker to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users switching between the Nightly and Release versions of Firefox if the same profile is used. This vulnerability affects Thunderbird < 60.2.1, Firefox ESR < 60.2.1, and Firefox < 62.0.2.

    Product
    Thunderbird
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 19, 2018In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackeCVE-2018-14438 · Other software · Wireshark · reported by MITREHigh 7.5

    In Wireshark through 2.6.2, the create_app_running_mutex function in wsutil/file_util.c calls SetSecurityDescriptorDacl to set a NULL DACL, which allows attackers to modify the access control arbitrarily.

    Product
    Wireshark
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 7, 2017SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to eCVE-2016-7784 · Other software · Exponentcms · reported by MITRECritical 9.8

    SQL injection vulnerability in the getSection function in framework/core/subsystems/expRouter.php in Exponent CMS 2.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.

    Product
    Exponent CMS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 9, 2017An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in theCVE-2017-5590 · Other software · Chatsecure · reported by MITREMedium 5.9

    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for ChatSecure (3.2.0 - 4.0.0; only iOS) and Zom (all versions up to 1.0.11; only iOS).

    Product
    Chatsecure
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 26, 2012Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.CVE-2012-4677 · Computers, phones & browsers · Google · reported by MITREMedium 4.4

    Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

    Product
    Tunnelblick
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 11, 2012Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web scriCVE-2011-4306 · Other software · Moodle · reported by Red HatMedium 4.3

    Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.

    Product
    Moodle
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 8, 2011IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which CVE-2011-3391 · Other software · IBM · reported by MITREMedium 4

    IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu.

    Product
    Rational Build Forge
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2011Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass CVE-2011-1419 · Websites & servers · Apache · reported by MITREMedium 5.8

    Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-1088.

    Product
    Tomcat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 14, 2011Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requeCVE-2011-1088 · Websites & servers · Apache · reported by Red HatMedium 5.8

    Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.

    Product
    Tomcat
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 4, 2009Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), CVE-2009-0061 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 7.8

    Unspecified vulnerability in the Wireless LAN Controller (WLC) TSEC driver in the Cisco 4400 WLC, Cisco Catalyst 6500 and 7600 Wireless Services Module (WiSM), and Cisco Catalyst 3750 Integrated Wireless LAN Controller with software 4.x before 4.2.176.0 and 5.x before 5.1 allows remote attackers to cause a denial of service (device crash or hang) via unknown IP packets.

    Product
    4400 Wireless LAN Controller
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 28, 2009The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, whicCVE-2008-6000 · Other software · Gdata · reported by MITREHigh 7.2

    The GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008 populates kernel registers with IOCTL 0x8317001c input values, which allows local users to cause a denial of service (system crash) or gain privileges via a crafted IOCTL request, as demonstrated by execution of the KeSetEvent function with modified register contents.

    Product
    Antivirus 2008
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 2007Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local uCVE-2007-5040 · Other software · Ghostsecurity · reported by MITRELow 2.1

    Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtCreateThread, (3) NtDeleteValueKey, (4) NtQueryValueKey, (5) NtSetSystemInformation, and (6) NtSetValueKey kernel SSDT hooks.

    Product
    Ghost Security Suite
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 2007G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local usersCVE-2007-5041 · Other software · Gdata · reported by MITREMedium 4.6

    G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey and (2) NtOpenProcess kernel SSDT hooks.

    Product
    Internetsecurity 2007
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 2007Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local usCVE-2007-5039 · Other software · Ghostsecurity · reported by MITRELow 2.1

    Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the (1) NtCreateKey, (2) NtDeleteValueKey, (3) NtQueryValueKey, (4) NtSetSystemInformation, and (5) NtSetValueKey kernel SSDT hooks.

    Product
    Ghost Security Suite
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 13, 2007Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which CVE-2007-1442 · Other software · Oracle · reported by MITREHigh 7.2

    Oracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl function to create discretionary access control lists (DACLs), which allows local users to gain privileges.

    Product
    Database Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN CVE-2002-2122 · Other software · Pointsec Mobile Technologies · reported by MITRELow 2.1

    Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory.

    Product
    Pointsec
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.