Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 23 min ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
36added in the last 30 days
479new WordPress flaws this week
390,525entries in the database

288 results · page 3 of 6

  • Jan 10, 2022There is a Null pointer dereference vulnerability in the camera module in smartphones.CVE-2021-40039 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Double free vulnerability in the AOD module in smartphones.CVE-2021-40038 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Double free vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones.CVE-2021-40037 · Other software · Huawei · reported by psirt@huawei.comMedium 5.5

    There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.CVE-2021-40035 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Null pointer dereference vulnerability in the camera module in smartphones.CVE-2021-40031 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Null pointer dereference vulnerability in the camera module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones.CVE-2021-40029 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Buffer overflow vulnerability due to a boundary error with the Samba server in the file management module in smartphones. Successful exploitation of this vulnerability may affect function stability.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones.CVE-2021-40026 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Heap-based buffer overflow vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is an Out-of-bounds array read vulnerability in the security storage module in smartphones.CVE-2021-40020 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Out-of-bounds array read vulnerability in the security storage module in smartphones. Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is an uncontrolled resource consumption vulnerability in the display module.CVE-2021-40011 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an uncontrolled resource consumption vulnerability in the display module. Successful exploitation of this vulnerability may affect integrity.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.CVE-2021-40010 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    The bone voice ID TA has a heap overflow vulnerability.Successful exploitation of this vulnerability may result in malicious code execution.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is an Out-of-bounds write vulnerability in the AOD module in smartphones.CVE-2021-40009 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    There is an Out-of-bounds write vulnerability in the AOD module in smartphones. Successful exploitation of this vulnerability may affect service integrity.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 10, 2022There is an Integer overflow vulnerability with ACPU in smartphones.CVE-2021-39993 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is an Integer overflow vulnerability with ACPU in smartphones. Successful exploitation of this vulnerability may cause out-of-bounds access.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-39974 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Out-of-bounds read in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.CVE-2021-39973 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Null pointer dereference in Smartphones.Successful exploitation of this vulnerability may cause the kernel to break down.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-39969 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of tCVE-2021-39967 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Vulnerability of obtaining broadcast information improperly due to improper broadcast permission settings in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-39966 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Uninitialized AOD driver structure in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-37133 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.CVE-2021-37121 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.CVE-2021-37120 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalation.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-37119 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-37117 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-37114 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confCVE-2021-37113 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-37111 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 3, 2022There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-37110 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    Emui
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.CVE-2021-37097 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.CVE-2021-37093 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    There is a Improper Access Control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers steal short messages.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.CVE-2021-37092 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.CVE-2021-37075 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Credentials Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to confidentiality affected.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.CVE-2021-37074 · Other software · Huawei · reported by psirt@huawei.comHigh 8.1

    There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user root privilege escalation.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.CVE-2021-37069 · Other software · Huawei · reported by psirt@huawei.comHigh 7.4

    There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confCVE-2021-37054 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Identity spoofing and authentication bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-37053 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Service logic vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.CVE-2021-37052 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Exception log vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause address information leakage.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.CVE-2021-37051 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    There is an Out-of-bounds read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds memory access.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentialityCVE-2021-37050 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Missing sensitive data encryption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objectCVE-2021-37049 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is a Heap-based buffer overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may rewrite the memory of adjacent objects.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-modCVE-2021-37045 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is an UAF vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart unexpectedly and the kernel-mode code to be executed.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.CVE-2021-37044 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CICVE-2021-37040 · Other software · Huawei · reported by psirt@huawei.comCritical 9.8

    There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.CVE-2021-37039 · Other software · Huawei · reported by psirt@huawei.comMedium 6.5

    There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 8, 2021There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart.CVE-2021-37037 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Invalid address access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.CVE-2021-37096 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain deCVE-2021-37056 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device informationCVE-2021-37055 · Other software · Huawei · reported by psirt@huawei.comMedium 5.3

    There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.CVE-2021-37047 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to CVE-2021-37046 · Other software · Huawei · reported by psirt@huawei.comHigh 7.5

    There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart due to memory exhaustion.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.CVE-2021-37042 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 2021There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.CVE-2021-37041 · Other software · Huawei · reported by psirt@huawei.comCritical 9.1

    There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.

    Product
    EMUI
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.