Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
118 results · page 3 of 3
Jul 1, 2022NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe desCVE-2022-31604 · Other software · NVIDIA · reported by psirt@nvidia.comCritical 9.8
NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.
- Product
- NVIDIA FLARE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2022Cloudflare WARP client for Windows (up to v.CVE-2022-2145 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 5.8
Cloudflare WARP client for Windows (up to v. 2022.5.309.0) allowed creation of mount points from its ProgramData folder. During installation of the WARP client, it was possible to escalate privileges and overwrite SYSTEM protected files.
- Product
- WARP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 23, 2022Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation.CVE-2022-2147 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 6.5
Cloudflare Warp for Windows from version 2022.2.95.0 contained an unquoted service path which enables arbitrary code execution leading to privilege escalation. The fix was released in version 2022.3.186.0.
- Product
- WARP
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 10, 2022A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting aCVE-2022-30278 · Other software · Synopsys · reported by disclosure@synopsys.comMedium 6.1
A vulnerability in Black Duck Hub’s embedded MadCap Flare documentation files could allow an unauthenticated remote attacker to conduct a cross-site scripting attack. The vulnerability is due to improper validation of user-supplied input to MadCap Flare's framework embedded within Black Duck Hub's Help Documentation to supply content. An attacker could exploit this vulnerability by convincing a user to click a link designed to pass malicious input to the interface. A successful exploit could allow the attacker to conduct cross-site scripting attacks and gain access to sensitive browser-based information.
- Product
- Black Duck Hub
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsynopsys.comsynopsys.com
Mar 17, 2022NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, whCVE-2022-21822 · Other software · NVIDIA · reported by psirt@nvidia.comHigh 7.5
NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.
- Product
- NVIDIA FLARE
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repositCVE-2021-3912 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 4.2
OctoRPKI tries to load the entire contents of a repository in memory, and in the case of a GZIP bomb, unzip it in memory, making it possible to create a repository that makes OctoRPKI run out of memory (and thus crash).
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.CVE-2021-3911 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 4.2
If the ROA that a repository returns contains too many bits for the IP address then OctoRPKI will crash.
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).CVE-2021-3910 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 4.4
OctoRPKI crashes when encountering a repository that returns an invalid ROA (just an encoded NUL (\0) character).
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever.CVE-2021-3909 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 4.4
OctoRPKI does not limit the length of a connection, allowing for a slowloris DOS attack to take place which makes OctoRPKI wait forever. Specifically, the repository that OctoRPKI sends HTTP requests to will keep the connection open for a day before a response is returned, but does keep drip feeding new bytes to keep the connection alive.
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.CVE-2021-3908 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 5.9
OctoRPKI does not limit the depth of a certificate chain, allowing for a CA to create children in an ad-hoc fashion, thereby making tree traversal never end.
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2021OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex.CVE-2021-3907 · Other software · Cloudflare · reported by cna@cloudflare.comHigh 7.4
OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa), which would then be written to disk outside the base cache folder. This could allow for remote code execution on the host machine OctoRPKI is running on.
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 9, 2021Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate.CVE-2021-3761 · Other software · Cloudflare · reported by cna@cloudflare.comHigh 7.5
Any CA issuer in the RPKI can trick OctoRPKI prior to 1.3.0 into emitting an invalid VRP "MaxLength" value, causing RTR sessions to terminate. An attacker can use this to disable RPKI Origin Validation in a victim network (for example AS 13335 - Cloudflare) prior to launching a BGP hijack which during normal operations would be rejected as "RPKI invalid". Additionally, in certain deployments RTR session flapping in and of itself also could cause BGP routing churn, causing availability issues.
- Product
- octorpki
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Feb 2, 2021Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path.CVE-2020-35152 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 4.5
Cloudflare WARP for Windows allows privilege escalation due to an unquoted service path. A malicious user or process running with non-administrative privileges can become an administrator by abusing the unquoted service path issue. Since version 1.2.2695.1, the vulnerability was fixed by adding quotes around the service's binary path. This issue affects Cloudflare WARP for Windows, versions prior to 1.2.2695.1.
- Product
- Cloudflare WARP for Windows
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 2, 2020`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems.CVE-2020-24356 · Other software · Cloudflare · reported by cna@cloudflare.comMedium 6.4
`cloudflared` versions prior to 2020.8.1 contain a local privilege escalation vulnerability on Windows systems. When run on a Windows system, `cloudflared` searches for configuration files which could be abused by a malicious entity to execute commands as a privileged user. Version 2020.8.1 fixes this issue.
- Product
- cloudflared
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 14, 2019The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys contains CVE-2019-15377 · Other software · Cherrymobile · reported by MITREMedium 5.5
The Cherry Flare S7 Android device with a build fingerprint of Cherry_Mobile/Flare_S7_Deluxe/Flare_S7_Deluxe:8.1.0/O11019/1533920920:user/release-keys contains a pre-installed app with a package name of com.mediatek.wfo.impl app (versionCode=27, versionName=8.1.0) that allows any app co-located on the device to modify a system property through an exported interface without proper authorization.
- Product
- Flare S7 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordkryptowire.comkryptowire.com
Sep 28, 2018RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare HelCVE-2018-11074 · Other software · RSA · reported by security_alert@emc.comMedium 6.1
RSA Authentication Manager versions prior to 8.3 P3 are affected by a DOM-based cross-site scripting vulnerability which exists in its embedded MadCap Flare Help files. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to the browser DOM, which code is then executed by the web browser in the context of the vulnerable web application.
- Product
- Authentication Manager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsecuritytracker.com
Mar 23, 2017An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1.CVE-2017-7235 · Other software · Cloudflare-scrape Project · reported by MITREHigh 8.8
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.
- Product
- Cloudflare-scrape
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comgithub.com
Oct 3, 2012The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption anCVE-2012-3412 · Computers, phones & browsers · Linux · reported by Red HatHigh 7.8
The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value.
- Product
- Linux Kernel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orgrhn.redhat.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.