Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell: two critical PHP flaws affect most WordPress hosting. See if your site is affectedFlagged by our vulnerability database: PHP2Shell, two critical PHP flaws. DetailsFlagged: PHP2Shell. Check your site
HuttenlocherTechnologies
843-331-6339
Start a project →
Updated 11 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,754exploited flaws on CISA’s list
33added in the last 30 days
298new WordPress flaws this week
13,899entries in the database

1,754 results · page 25 of 36

  • Mar 25, 2022Citrix SD-WAN and NetScaler Command Injection VulnerabilityCVE-2019-12991 · Network & remote access · CitrixExploited

    Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance.

    Product
    SD-WAN and NetScaler
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Citrix’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Citrix SD-WAN and NetScaler SQL Injection VulnerabilityCVE-2019-12989 · Network & remote access · CitrixExploited

    Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection.

    Product
    SD-WAN and NetScaler
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Citrix’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022PHP FastCGI Process Manager (FPM) Buffer Overflow VulnerabilityCVE-2019-11043 · Websites & servers · PHPExploitedRansomware

    In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.

    Product
    FastCGI Process Manager (FPM)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install PHP’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Kentico Xperience Deserialization of Untrusted Data VulnerabilityCVE-2019-10068 · Other software · KenticoExploited

    Kentico contains a failure to validate security headers. This deserialization can led to unauthenticated remote code execution.

    Product
    Xperience
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Kentico’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Jenkins Matrix Project Plugin Remote Code Execution VulnerabilityCVE-2019-1003030 · Websites & servers · JenkinsExploited

    Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.

    Product
    Matrix Project Plugin
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Jenkins’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft GDI Remote Code Execution VulnerabilityCVE-2019-0903 · Computers, phones & browsers · MicrosoftExploited

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system.

    Product
    Graphics Device Interface (GDI)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft Windows Shell Remote Code Execution VulnerabilityCVE-2018-8414 · Computers, phones & browsers · MicrosoftExploited

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.

    Product
    Windows
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft Scripting Engine Memory Corruption VulnerabilityCVE-2018-8373 · Computers, phones & browsers · MicrosoftExploited

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer.

    Product
    Internet Explorer Scripting Engine
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022VMware SD-WAN Edge by VeloCloud Command Injection VulnerabilityCVE-2018-6961 · Other software · VMwareExploited

    VMware SD-WAN Edge by VeloCloud contains a command injection vulnerability in the local web UI component. Successful exploitation of this issue could result in remote code execution.

    Product
    SD-WAN Edge
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install VMware’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022VMware Tanzu Spring Data Commons Property Binder VulnerabilityCVE-2018-1273 · Other software · VMware TanzuExploitedRansomware

    Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.

    Product
    Spring Data Commons
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install VMware Tanzu’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Quest KACE System Management Appliance Remote Command Execution VulnerabilityCVE-2018-11138 · Other software · QuestExploitedRansomware

    The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution.

    Product
    KACE System Management Appliance
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Quest’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco Secure Access Control System Java Deserialization VulnerabilityCVE-2018-0147 · Network & remote access · CiscoExploited

    A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.

    Product
    Secure Access Control System (ACS)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco VPN Routers Remote Code Execution VulnerabilityCVE-2018-0125 · Network & remote access · CiscoExploited

    A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.

    Product
    VPN Routers
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022NETGEAR DGN2200 Devices OS Command Injection VulnerabilityCVE-2017-6334 · Network & remote access · NETGEARExploited

    dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands

    Product
    DGN2200 Devices
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install NETGEAR’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Citrix Multiple Products Remote Code Execution VulnerabilityCVE-2017-6316 · Network & remote access · CitrixExploited

    A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.

    Product
    NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Citrix’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco IOS and IOS XE Remote Code Execution VulnerabilityCVE-2017-3881 · Network & remote access · CiscoExploited

    A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges.

    Product
    IOS and IOS XE
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Apache Tomcat Remote Code Execution VulnerabilityCVE-2017-12617 · Websites & servers · ApacheExploited

    When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

    Product
    Tomcat
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Apache Tomcat on Windows Remote Code Execution VulnerabilityCVE-2017-12615 · Websites & servers · ApacheExploitedRansomware

    When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

    Product
    Tomcat
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Apache’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Adobe Flash Player Use-After-Free VulnerabilityCVE-2016-7892 · Other software · AdobeExploited

    Adobe Flash Player has an exploitable use-after-free vulnerability in the TextField class.

    Product
    Flash Player
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Adobe Flash Player Remote Code Execution VulnerabilityCVE-2016-4171 · Other software · AdobeExploited

    Unspecified vulnerability in Adobe Flash Player allows for remote code execution.

    Product
    Flash Player
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022NETGEAR Multiple WAP Devices Command Injection VulnerabilityCVE-2016-1555 · Network & remote access · NETGEARExploited

    Multiple NETGEAR Wireless Access Point devices allows unauthenticated web pages to pass form input directly to the command-line interface. Exploitation allows for arbitrary code execution.

    Product
    Wireless Access Point (WAP) Devices
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install NETGEAR’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022D-Link DCS-930L Devices OS Command Injection VulnerabilityCVE-2016-11021 · Network & remote access · D-LinkExploited

    setSystemCommand on D-Link DCS-930L devices allows a remote attacker to execute code via an OS command.

    Product
    DCS-930L Devices
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022NETGEAR WNR2000v5 Router Buffer Overflow VulnerabilityCVE-2016-10174 · Network & remote access · NETGEARExploited

    The NETGEAR WNR2000v5 router contains a buffer overflow which can be exploited to achieve remote code execution.

    Product
    WNR2000v5 Router
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install NETGEAR’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Ruby on Rails Directory Traversal VulnerabilityCVE-2016-0752 · Other software · RailsExploited

    Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.

    Product
    Ruby on Rails
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Rails’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Arcserve Unified Data Protection (UDP) Directory Traversal VulnerabilityCVE-2015-4068 · Other software · ArcserveExploited

    Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.

    Product
    Unified Data Protection (UDP)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Arcserve’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022TP-Link Multiple Archer Devices Directory Traversal VulnerabilityCVE-2015-3035 · Network & remote access · TP-LinkExploited

    Directory traversal vulnerability in multiple TP-Link Archer devices allows remote attackers to read arbitrary files via a .. (dot dot) in the PATH_INFO to login/.

    Product
    Multiple Archer Devices
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install TP-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Elasticsearch Groovy Scripting Engine Remote Code Execution VulnerabilityCVE-2015-1427 · Other software · ElasticExploited

    The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

    Product
    Elasticsearch
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Elastic’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022D-Link and TRENDnet Multiple Devices Remote Code Execution VulnerabilityCVE-2015-1187 · Network & remote access · D-Link and TRENDnetExploited

    The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to perform remote code execution.

    Product
    Multiple Devices
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install D-Link and TRENDnet’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco Prime Data Center Network Manager (DCNM) Directory Traversal VulnerabilityCVE-2015-0666 · Network & remote access · CiscoExploited

    Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) allows remote attackers to read arbitrary files.

    Product
    Prime Data Center Network Manager (DCNM)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution VulnerabilityCVE-2014-6332 · Computers, phones & browsers · MicrosoftExploited

    OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site.

    Product
    Windows
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation VulnerabilityCVE-2014-6324 · Computers, phones & browsers · MicrosoftExploited

    The Kerberos Key Distribution Center (KDC) in Microsoft allows remote authenticated domain users to obtain domain administrator privileges.

    Product
    Kerberos Key Distribution Center (KDC)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Rejetto HTTP File Server (HFS) Remote Code Execution VulnerabilityCVE-2014-6287 · Other software · RejettoExploited

    The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (HFS or HttpFileServer) allows remote attackers to execute arbitrary programs.

    Product
    HTTP File Server (HFS)
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Rejetto’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Elasticsearch Remote Code Execution VulnerabilityCVE-2014-3120 · Other software · ElasticExploited

    Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

    Product
    Elasticsearch
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Elastic’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Ruby on Rails Directory Traversal VulnerabilityCVE-2014-0130 · Other software · RailsExploited

    Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.

    Product
    Ruby on Rails
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Rails’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022D-Link DSL-2760U Gateway Cross-Site Scripting VulnerabilityCVE-2013-5223 · Network & remote access · D-LinkExploited

    A cross-site scripting (XSS) vulnerability exists in the D-Link DSL-2760U gateway, allowing remote authenticated users to inject arbitrary web script or HTML.

    Product
    DSL-2760U
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022HP Multiple Products Remote Code Execution VulnerabilityCVE-2013-4810 · Other software · Hewlett Packard (HP)Exploited

    HP ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet.

    Product
    ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Hewlett Packard (HP)’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Apache Struts Improper Input Validation VulnerabilityCVE-2013-2251 · Websites & servers · ApacheExploited

    Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.

    Product
    Struts
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022PHP-CGI Query String Parameter VulnerabilityCVE-2012-1823 · Websites & servers · PHPExploited

    sapi/cgi/cgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.

    Product
    PHP
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install PHP’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Exim Privilege Escalation VulnerabilityCVE-2010-4345 · Other software · EximExploited

    Exim allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive that contains arbitrary commands.

    Product
    Exim
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Exim’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Exim Heap-Based Buffer Overflow VulnerabilityCVE-2010-4344 · Other software · EximExploited

    Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.

    Product
    Exim
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Exim’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCVE-2010-3035 · Network & remote access · CiscoExploited

    Cisco IOS XR, when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

    Product
    IOS XR
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Adobe ColdFusion Directory Traversal VulnerabilityCVE-2010-2861 · Websites & servers · AdobeExploitedRansomware

    A directory traversal vulnerability exists in the administrator console in Adobe ColdFusion which allows remote attackers to read arbitrary files.

    Product
    ColdFusion
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Adobe’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service VulnerabilityCVE-2009-2055 · Network & remote access · CiscoExploited

    Cisco IOS XR,when BGP is the configured routing feature, allows remote attackers to cause a denial-of-service (DoS).

    Product
    IOS XR
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Cisco’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022phpMyAdmin Remote Code Execution VulnerabilityCVE-2009-1151 · Websites & servers · phpMyAdminExploited

    Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file.

    Product
    phpMyAdmin
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install phpMyAdmin’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow VulnerabilityCVE-2009-0927 · Email & office · AdobeExploited

    Stack-based buffer overflow in Adobe Reader and Adobe Acrobat allows remote attackers to execute arbitrary code.

    Product
    Reader and Acrobat
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Adobe’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022HP OpenView Network Node Manager Remote Code Execution VulnerabilityCVE-2005-2773 · Other software · Hewlett Packard (HP)Exploited

    HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

    Product
    OpenView Network Node Manager
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Hewlett Packard (HP)’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Microsoft Windows SMB Remote Code Execution VulnerabilityCVE-2017-0146 · Computers, phones & browsers · MicrosoftExploitedRansomware

    The SMBv1 server in Microsoft Windows allows remote attackers to perform remote code execution.

    Product
    Windows
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Microsoft’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022Apache Kylin OS Command Injection VulnerabilityCVE-2020-1956 · Websites & servers · ApacheExploited

    Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution.

    Product
    Kylin
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install Apache’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022LG N1A1 NAS Remote Command Execution VulnerabilityCVE-2018-14839 · Other software · LGExploited

    LG N1A1 NAS 3718.510 is affected by a remote code execution vulnerability.

    Product
    N1A1 NAS
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install LG’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

  • Mar 25, 2022D-Link Multiple Routers Command Injection VulnerabilityCVE-2019-16920 · Network & remote access · D-LinkExploited

    Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise.

    Product
    Multiple Routers
    On CISA’s list since
    Mar 25, 2022 (federal fix deadline Apr 15, 2022)
    What to do
    Attackers are using this now. Install D-Link’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.

    NVD recordCISA catalog

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. The WordPress, CMS and hosting-panel entries come from the National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan and others); we show who. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Start a project

Tell us what you're building.

A website, a booking system, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll build it writes back
02A planning call, then a written plan with the price and the date
03A preview on your phone while it's being built
04Launch night handled: redirects, email, Google
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?

No newsletter, no sales sequence. Just a reply.