Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
1,281 results · page 22 of 26
Sep 16, 2022The secure OS module has configuration defects.CVE-2022-38978 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 16, 2022Implementation of the WLAN module interfaces has the information disclosure vulnerability.CVE-2021-46836 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 16, 2022Implementation of the WLAN module interfaces has the information disclosure vulnerability.CVE-2021-40024 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Implementation of the WLAN module interfaces has the information disclosure vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Sep 13, 2022insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.CVE-2022-36778 · Other software · Synel · reported by cna@cyber.gov.ilMedium 6.5
insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.
- Product
- eHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2022OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability.CVE-2022-38701 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.2
OpenHarmony-v3.1.2 and prior versions have a heap overflow vulnerability. Local attackers can trigger a heap overflow and get network sensitive information.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2022OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability.CVE-2022-38700 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 8.8
OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2022OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability.CVE-2022-38081 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.2
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. LAN attackers can bypass the distributed permission control.To take advantage of this weakness, attackers need another vulnerability to obtain system.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2022OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability.CVE-2022-38064 · Other software · OpenHarmony · reported by scy@openharmony.ioMedium 6.2
OpenHarmony-v3.1.2 and prior versions have a permission bypass vulnerability. Local attackers can bypass permission control and get sensitive information.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2022OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing.CVE-2022-36423 · Other software · OpenHarmony · reported by scy@openharmony.ioHigh 7.4
OpenHarmony-v3.1.2 and prior versions have an incorrect configuration of the cJSON library, which leads a Stack overflow vulnerability during recursive parsing. LAN attackers can lead a DoS attack to all network devices.
- Product
- OpenHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 2022The recovery module has a vulnerability of bypassing the verification of an update package before use.CVE-2022-37008 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The chinadrm module has an out-of-bounds read vulnerability.CVE-2022-37007 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The chinadrm module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect the availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The Settings application has an argument injection vulnerability.CVE-2022-37005 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE).CVE-2022-37004 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The Settings application has a vulnerability of bypassing the out-of-box experience (OOBE). Successful exploitation of this vulnerability may affect the availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The AOD module has a vulnerability in permission assignment.CVE-2022-37003 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The AOD module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may cause permission escalation and unauthorized access to files.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The SystemUI module has a privilege escalation vulnerability.CVE-2022-37002 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The diag-router module has a vulnerability in intercepting excessive long and short instructions.CVE-2022-37001 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevice.harmonyos.comdevice.harmonyos.com
Aug 10, 2022The video framework has the memory overwriting vulnerability caused by addition overflow.CVE-2021-40034 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 10, 2022The My HUAWEI app has a defect in the design.CVE-2021-40030 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The My HUAWEI app has a defect in the design. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Aug 5, 2022insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.CVE-2022-34768 · Other software · Synel · reported by cna@cyber.gov.ilMedium 6.5
insert HTML / js code inside input how to get to the vulnerable input : Workers > worker nickname > inject in this input the code.
- Product
- eHarmony
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2022The AT commands of the USB port have an out-of-bounds read vulnerability.CVE-2022-34743 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The AT commands of the USB port have an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The system module has a read/write vulnerability.CVE-2022-34742 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 12, 2022The NFC module has a buffer overflow vulnerability.CVE-2022-34741 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The NFC module has a buffer overflow vulnerability.CVE-2022-34740 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5
The NFC module has a buffer overflow vulnerability. Successful exploitation of this vulnerability may cause exceptions in NFC card registration, deletion, and activation.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The fingerprint module has a vulnerability of overflow in arithmetic addition.CVE-2022-34739 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The fingerprint module has a vulnerability of overflow in arithmetic addition. Successful exploitation of this vulnerability may result in the acquisition of data from unknown addresses in address mappings.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The SystemUI module has a vulnerability in permission control.CVE-2022-34738 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The application security module has a vulnerability in permission assignment.CVE-2022-34737 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
The application security module has a vulnerability in permission assignment. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The frame scheduling module has a null pointer dereference vulnerability.CVE-2022-34736 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The frame scheduling module has a null pointer dereference vulnerability.CVE-2022-34735 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jul 12, 2022The basic framework and setting module have defects, which were introduced during the design.CVE-2021-46741 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The basic framework and setting module have defects, which were introduced during the design. Successful exploitation of this vulnerability may affect system integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jul 12, 2022Vulnerability of pointers being incorrectly used during data transmission in the video framework.CVE-2021-40012 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
Vulnerability of pointers being incorrectly used during data transmission in the video framework. Successful exploitation of this vulnerability may affect confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 13, 2022The bone voice ID TA has a memory overwrite vulnerability.CVE-2021-40036 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution.
- Product
- Harmonyos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddevice.harmonyos.comdevice.harmonyos.com
Jun 13, 2022Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services.CVE-2022-31760 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1
Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The setting module has a vulnerability of improper use of APIs.CVE-2022-31757 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The voice wakeup module has a vulnerability of using externally-controlled format strings.CVE-2022-31753 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The voice wakeup module has a vulnerability of using externally-controlled format strings. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The Device Manager has a vulnerability in multi-device interaction.CVE-2021-46812 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022HwSEServiceAPP has a vulnerability in permission management.CVE-2021-46811 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The kernel module has the null pointer and out-of-bounds array vulnerabilities.CVE-2022-31763 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The AMS module has a vulnerability in input validation.CVE-2022-31762 · Other software · Huawei · reported by psirt@huawei.comHigh 7.8
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 13, 2022AppLink has a vulnerability of accessing uninitialized pointers.CVE-2022-31759 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
AppLink has a vulnerability of accessing uninitialized pointers. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The kernel module has the race condition vulnerability.CVE-2022-31758 · Other software · Huawei · reported by psirt@huawei.comMedium 4.7
The kernel module has the race condition vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The fingerprint sensor module has design defects.CVE-2022-31756 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
The fingerprint sensor module has design defects. Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Jun 13, 2022The communication module has a vulnerability of improper permission preservation.CVE-2022-31755 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
The communication module has a vulnerability of improper permission preservation. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 13, 2022The kernel emcom module has multi-thread contention.CVE-2022-31751 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5
The kernel emcom module has multi-thread contention. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comconsumer.huawei.com
Jun 13, 2022The video framework has an out-of-bounds memory read/write vulnerability.CVE-2021-46814 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servicCVE-2022-29796 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The frame scheduling module has a null pointer dereference vulnerability.CVE-2022-29795 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The frame scheduling module has a null pointer dereference vulnerability. Successful exploitation of this vulnerability will affect the kernel availability.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, andCVE-2022-29794 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8
The frame scheduling module has a Use After Free (UAF) vulnerability.Successful exploitation of this vulnerability will affect data integrity, availability, and confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.CVE-2022-29792 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The chip component has a vulnerability of disclosing CPU SNs.Successful exploitation of this vulnerability may affect data confidentiality.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI servicCVE-2022-29791 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The HiAIserver has a vulnerability in verifying the validity of the weight used in the model.Successful exploitation of this vulnerability will affect AI services.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
May 13, 2022The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service excCVE-2022-29790 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5
The graphics acceleration service has a vulnerability in multi-thread access to the database.Successful exploitation of this vulnerability may cause service exceptions.
- Product
- HarmonyOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordconsumer.huawei.comdevice.harmonyos.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.