Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
184 results · page 2 of 4
Mar 14, 2024An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent funCVE-2024-26475 · Other software · Radare · reported by MITREMedium 5.5
An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 22, 2023radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.CVE-2023-47016 · Other software · Radare · reported by MITREHigh 7.5
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Oct 27, 2023An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.CVE-2023-46570 · Other software · Radare · reported by MITRECritical 9.8
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Oct 27, 2023An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.CVE-2023-46569 · Other software · Radare · reported by MITRECritical 9.8
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgist.github.comgithub.com
Oct 20, 2023Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-5686 · Other software · radareorg · reported by security@huntr.devHigh 8.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.CVE-2022-28073 · Other software · Radare · reported by MITREHigh 7.5
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.CVE-2022-28072 · Other software · Radare · reported by MITREHigh 7.5
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.CVE-2022-28071 · Other software · Radare · reported by MITREHigh 7.5
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.CVE-2022-28070 · Other software · Radare · reported by MITREHigh 7.5
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.CVE-2022-28069 · Other software · Radare · reported by MITREHigh 7.5
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 22, 2023A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.CVE-2022-28068 · Other software · Radare · reported by MITREHigh 7.5
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 14, 2023Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-4322 · Other software · radareorg · reported by security@huntr.devCritical 9.8
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2023Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function.CVE-2021-32495 · Other software · radare2 · reported by patrick@puiterwijk.orgCritical 10
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
- Product
- radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2023Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function.CVE-2021-32494 · Other software · radare2 · reported by patrick@puiterwijk.orgCritical 10
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.
- Product
- radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 23, 2023Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.CVE-2023-1605 · Other software · radareorg · reported by security@huntr.devHigh 7.5
Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2023radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.CVE-2023-27114 · Other software · Radare · reported by MITREMedium 5.5
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 14, 2023Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.CVE-2023-0302 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 29, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.CVE-2022-4843 · Other software · radareorg · reported by security@huntr.devHigh 7.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 10, 2022Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.CVE-2022-4398 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2022A segmentation fault was discovered in radare2 with adf command.CVE-2020-27795 · Other software · Radare · reported by Red HatHigh 7.5
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2022A double free issue was discovered in radare2 in cmd_info.c:cmd_info().CVE-2020-27794 · Other software · Radare · reported by Red HatCritical 9.1
A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2022An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c.CVE-2020-27793 · Other software · Radare · reported by Red HatHigh 7.5
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 22, 2022Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c.CVE-2022-34520 · Other software · Radare · reported by MITREMedium 5.5
Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 22, 2022Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c.CVE-2022-34502 · Other software · Radare · reported by MITREMedium 5.5
Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary file.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 26, 2022Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1899 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 25, 2022radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.CVE-2021-44974 · Other software · Radare · reported by MITREMedium 5.5
radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comcensus-labs.com
May 24, 2022radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.CVE-2021-44975 · Other software · Radare · reported by MITREMedium 5.5
radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordopenwall.comcensus-labs.com
May 21, 2022Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1809 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 13, 2022Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1714 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2022Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1649 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/476.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 24, 2022Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1452 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 24, 2022Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1451 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 23, 2022heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1444 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 22, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0.CVE-2022-1437 · Other software · radareorg · reported by security@huntr.devHigh 7.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2022Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1383 · Other software · radareorg · reported by security@huntr.devMedium 6.1
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 17, 2022NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1382 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2022Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1297 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 11, 2022Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1296 · Other software · radareorg · reported by security@huntr.devCritical 9.1
Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2022heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1284 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 8, 2022NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1283 · Other software · radareorg · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6.CVE-2022-1240 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the `r_str_ncpy` function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1238 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 6, 2022Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1237 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 5, 2022heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1244 · Other software · radareorg · reported by security@huntr.devMedium 5.5
heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 1, 2022Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1207 · Other software · radareorg · reported by security@huntr.devMedium 6.6
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2022Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-1052 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 24, 2022Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.CVE-2022-1061 · Other software · radareorg · reported by security@huntr.devHigh 7.5
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 22, 2022Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-1031 · Other software · radareorg · reported by security@huntr.devHigh 7.8
Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 5, 2022Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-0849 · Other software · radareorg · reported by security@huntr.devMedium 5.5
Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
- Product
- radareorg/radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 24, 2022A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2.CVE-2021-4021 · Other software · Radare · reported by patrick@puiterwijk.orgHigh 7.5
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.
- Product
- Radare2
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.