Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
472new WordPress flaws this week
390,714entries in the database

420 results · page 4 of 9

  • May 25, 2023Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.CVE-2023-2881 · Other software · pimcore · reported by security@huntr.devMedium 4.9

    Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

    Product
    pimcore/customer-data-framework
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 17, 2023The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive files via ..CVE-2023-32767 · Other software · Symcon · reported by MITREHigh 7.5

    The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive files via .. directory-traversal sequences in the URL.

    Product
    IP Symcon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 17, 2023SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.CVE-2023-2756 · Other software · pimcore · reported by security@huntr.devHigh 7.2

    SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

    Product
    pimcore/customer-data-framework
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 16, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.CVE-2023-2730 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 11, 2023The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management.CVE-2023-32075 · Other software · pimcore · reported by GitHubMedium 4.3

    The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to version 3.3.9, business logic errors are possible in the `Conditions` tab since the counter can be a negative number. This vulnerability is capable of the unlogic in the counter value in the Conditions tab. Users should update to version 3.3.9 to receive a patch or, as a workaround, or apply the patch manually.

    Product
    customer-data-framework
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 10, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2630 · Other software · pimcore · reported by security@huntr.devMedium 4.8

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 10, 2023Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.CVE-2023-2629 · Other software · pimcore · reported by security@huntr.devHigh 7.8

    Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

    Product
    pimcore/customer-data-framework
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 10, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2615 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 10, 2023Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2614 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 10, 2023Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2616 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 8, 2023Pimcore is an open source data and experience management platform.CVE-2023-30855 · Other software · pimcore · reported by GitHubMedium 6.5

    Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 28, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2361 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Pimcore is an open source data and experience management platform.CVE-2023-30852 · Other software · pimcore · reported by GitHubMedium 4.4

    Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the "scriptPath" parameter and the file name in the "scripts" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Pimcore is an open source data and experience management platform.CVE-2023-30850 · Other software · pimcore · reported by GitHubHigh 8.8

    Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Pimcore is an open source data and experience management platform.CVE-2023-30849 · Other software · pimcore · reported by GitHubHigh 8.8

    Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Pimcore is an open source data and experience management platform.CVE-2023-30848 · Other software · pimcore · reported by GitHubHigh 8.8

    Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2343 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2342 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2341 · Other software · pimcore · reported by security@huntr.devMedium 6.1

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2340 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2339 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2338 · Other software · pimcore · reported by security@huntr.devHigh 8.8

    SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2336 · Other software · pimcore · reported by security@huntr.devMedium 6.5

    Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2328 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2327 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2323 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 27, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.CVE-2023-2322 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 9, 2023Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.CVE-2023-27729 · Network & remote access · F5 · reported by MITREHigh 7.5

    Nginx NJS v0.7.10 was discovered to contain an illegal memcpy via the function njs_vmcode_return at src/njs_vmcode.c.

    Product
    NJS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 9, 2023Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.CVE-2023-27728 · Network & remote access · F5 · reported by MITREHigh 7.5

    Nginx NJS v0.7.10 was discovered to contain a segmentation violation via the function njs_dump_is_recursive at src/njs_vmcode.c.

    Product
    NJS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 3, 2023Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives.CVE-2023-28850 · Other software · pimcore · reported by GitHubMedium 6.1

    Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Version 1.5.1 has a patch. As a workaround, one may apply the patch manually.

    Product
    perspective-editor
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-1704 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2023Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-1703 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2023Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-1702 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.CVE-2023-1701 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 24, 2023In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow.CVE-2022-42499 · Computers, phones & browsers · Google · reported by security@android.comCritical 9.8

    In sms_SendMmCpErrMsg of sms_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-242001391References: N/A

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 22, 2023Pimcore is an open source data and experience management platform.CVE-2023-28438 · Other software · pimcore · reported by GitHubMedium 6.2

    Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method (no CSRF protection), an attacker can inject an arbitrary query by manipulating a user to click on a link. Users should upgrade to version 10.5.19 to receive a patch or, as a workaround, may apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 22, 2023SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1578 · Other software · pimcore · reported by security@huntr.devHigh 8.8

    SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 20, 2023Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1517 · Other software · pimcore · reported by security@huntr.devMedium 4.8

    Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 20, 2023Pimcore is an open source data and experience management platform.CVE-2023-28429 · Other software · pimcore · reported by GitHubMedium 6.1

    Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class definition. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 10.5.19 or, as a workaround, apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 20, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1515 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 16, 2023Pimcore is an open source data and experience management platform.CVE-2023-28108 · Other software · pimcore · reported by GitHubHigh 7.9

    Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 16, 2023Pimcore is an open source data and experience management platform.CVE-2023-28106 · Other software · pimcore · reported by GitHubMedium 6.1

    Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.

    Product
    pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 16, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1429 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 10, 2023Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1312 · Other software · pimcore · reported by security@huntr.devMedium 4.8

    Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 9, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.CVE-2023-1286 · Other software · pimcore · reported by security@huntr.devMedium 4.8

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 1, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.CVE-2023-1117 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 1, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.CVE-2023-1116 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 1, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.CVE-2023-1115 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.CVE-2023-1067 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 14, 2023Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.CVE-2023-0827 · Other software · pimcore · reported by security@huntr.devMedium 5.4

    Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.

    Product
    pimcore/pimcore
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.