Updated 4 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list

34added in the last 30 days

344new WordPress flaws this week

390,080entries in the database

160 results · page 3 of 4

May 18, 2022Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.CVE-2022-1771 · Other software · vim · reported by security@huntr.devMedium 5.5
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
May 17, 2022Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.CVE-2022-1735 · Other software · vim · reported by security@huntr.devHigh 7.8
Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 17, 2022Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.CVE-2022-1769 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 17, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.CVE-2022-1733 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 12, 2022NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938.CVE-2022-1674 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 10, 2022Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925.CVE-2022-1629 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 10, 2022Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919.CVE-2022-1621 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 8, 2022NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901.CVE-2022-1620 · Other software · vim · reported by security@huntr.devHigh 7.5
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 8, 2022Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899.CVE-2022-1619 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 7, 2022Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895.CVE-2022-1616 · Other software · vim · reported by security@huntr.devHigh 7.8
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Apr 21, 2022Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.CVE-2022-1420 · Other software · vim · reported by security@huntr.devMedium 5.5
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Apr 17, 2022global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763.CVE-2022-1381 · Other software · vim · reported by security@huntr.devHigh 7.8
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Mar 30, 2022heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.CVE-2022-1160 · Other software · vim · reported by security@huntr.devHigh 7.8
heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Mar 30, 2022Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.CVE-2022-1154 · Other software · vim · reported by security@huntr.devHigh 7.8
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Mar 14, 2022Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.CVE-2022-0943 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 23, 2022Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.CVE-2022-0729 · Other software · vim · reported by security@huntr.devHigh 8.8
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 22, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.CVE-2022-0714 · Other software · vim · reported by security@huntr.devMedium 5.5
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4436.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 21, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.CVE-2022-0696 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4428.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 20, 2022Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.CVE-2022-0685 · Other software · vim · reported by security@huntr.devHigh 7.8
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4418.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 17, 2022Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0629 · Other software · vim · reported by security@huntr.devHigh 7.8
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 14, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0572 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 10, 2022Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.CVE-2022-0554 · Other software · vim · reported by security@huntr.devHigh 7.8
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Feb 2, 2022Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-0443 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Feb 1, 2022Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.CVE-2022-0417 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jan 30, 2022Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-0413 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jan 30, 2022Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0408 · Other software · vim · reported by security@huntr.devHigh 7.8
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jan 30, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0407 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jan 28, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-0393 · Other software · vim · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jan 28, 2022Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.CVE-2022-0392 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 26, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-0368 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 26, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0361 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 26, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0359 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 25, 2022Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.CVE-2022-0351 · Other software · vim · reported by security@huntr.devHigh 7.8
Access of Memory Location Before Start of Buffer in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 21, 2022Out-of-bounds Read in vim/vim prior to 8.2.CVE-2022-0319 · Other software · vim · reported by security@huntr.devMedium 5.5
Out-of-bounds Read in vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 21, 2022Heap-based Buffer Overflow in vim/vim prior to 8.2.CVE-2022-0318 · Other software · vim · reported by security@huntr.devCritical 9.8
Heap-based Buffer Overflow in vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 18, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-0261 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 14, 2022vim is vulnerable to Heap-based Buffer OverflowCVE-2022-0213 · Other software · vim · reported by security@huntr.devMedium 6.6
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com github.com
Jan 10, 2022vim is vulnerable to Heap-based Buffer OverflowCVE-2022-0158 · Other software · vim · reported by security@huntr.devLow 3.3
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 10, 2022vim is vulnerable to Use After FreeCVE-2022-0156 · Other software · vim · reported by security@huntr.devMedium 5.5
vim is vulnerable to Use After Free
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jan 6, 2022vim is vulnerable to Out-of-bounds ReadCVE-2022-0128 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Out-of-bounds Read
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 31, 2021vim is vulnerable to Out-of-bounds ReadCVE-2021-4193 · Other software · vim · reported by security@huntr.devMedium 5.5
vim is vulnerable to Out-of-bounds Read
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 31, 2021vim is vulnerable to Use After FreeCVE-2021-4192 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Use After Free
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 29, 2021vim is vulnerable to Use After FreeCVE-2021-4187 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Use After Free
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 27, 2021vim is vulnerable to Use After FreeCVE-2021-4173 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Use After Free
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 25, 2021vim is vulnerable to Out-of-bounds ReadCVE-2021-4166 · Other software · vim · reported by security@huntr.devHigh 7.1
vim is vulnerable to Out-of-bounds Read
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 19, 2021vim is vulnerable to Heap-based Buffer OverflowCVE-2021-4136 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Dec 6, 2021vim is vulnerable to Use After FreeCVE-2021-4069 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Use After Free
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com github.com
Dec 1, 2021vim is vulnerable to Heap-based Buffer OverflowCVE-2021-3984 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com github.com
Dec 1, 2021vim is vulnerable to Heap-based Buffer OverflowCVE-2021-4019 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com github.com
Nov 19, 2021vim is vulnerable to Heap-based Buffer OverflowCVE-2021-3973 · Other software · vim · reported by security@huntr.devHigh 7.8
vim is vulnerable to Heap-based Buffer Overflow
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record openwall.com github.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.