Updated 22 min ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list

36added in the last 30 days

479new WordPress flaws this week

390,525entries in the database

354 results · page 5 of 8

Jul 5, 2022Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.CVE-2022-2304 · Other software · vim · reported by security@huntr.devHigh 7.8
Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 3, 2022Use After Free in GitHub repository vim/vim prior to 9.0.CVE-2022-2289 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 3, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.CVE-2022-2288 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 2, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.CVE-2022-2287 · Other software · vim · reported by security@huntr.devHigh 7.1
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 2, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.CVE-2022-2286 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 2, 2022Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.CVE-2022-2285 · Other software · vim · reported by security@huntr.devHigh 7.8
Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 2, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.CVE-2022-2284 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jul 1, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.CVE-2022-2264 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 30, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.CVE-2022-2257 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 28, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.CVE-2022-2231 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 27, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-2210 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 27, 2022NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.CVE-2022-2208 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.5163.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 27, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-2207 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 26, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-2206 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 23, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-2183 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 23, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-2182 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 23, 2022Buffer Over-read in GitHub repository vim/vim prior to 8.2.CVE-2022-2175 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 20, 2022Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956.CVE-2022-1720 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 19, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-2129 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Jun 19, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-2126 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 19, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-2125 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 19, 2022Buffer Over-read in GitHub repository vim/vim prior to 8.2.CVE-2022-2124 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 10, 2022Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-2042 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 9, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-2000 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Jun 2, 2022Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-1968 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 31, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-1942 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 29, 2022Buffer Over-read in GitHub repository vim/vim prior to 8.2.CVE-2022-1927 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 27, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.CVE-2022-1897 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 27, 2022Use After Free in GitHub repository vim/vim prior to 8.2.CVE-2022-1898 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 26, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.CVE-2022-1886 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
May 25, 2022When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected croCVE-2021-32989 · Other software · LCDS—Leão Consultoria e Desenvolvimento de Sistemas Ltda ME · reported by ics-cert@hq.dhs.govCritical 9.3
When a non-existent resource is requested, the LCDS LAquis SCADA application (version 4.3.1.1011 and prior) returns error messages which may allow reflected cross-site scripting.
Product
LAquis SCADA
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record cisa.gov cisa.gov
May 25, 2022Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.CVE-2022-1851 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 19, 2022Use After Free in GitHub repository vim/vim prior to 8.2.4979.CVE-2022-1796 · Other software · vim · reported by security@huntr.devHigh 7.8
Use After Free in GitHub repository vim/vim prior to 8.2.4979.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
May 19, 2022Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.CVE-2022-1785 · Other software · vim · reported by security@huntr.devHigh 7.8
Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.4977.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
May 18, 2022Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.CVE-2022-1771 · Other software · vim · reported by security@huntr.devMedium 5.5
Uncontrolled Recursion in GitHub repository vim/vim prior to 8.2.4975.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
May 17, 2022Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.CVE-2022-1735 · Other software · vim · reported by security@huntr.devHigh 7.8
Classic Buffer Overflow in GitHub repository vim/vim prior to 8.2.4969.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 17, 2022Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.CVE-2022-1769 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in GitHub repository vim/vim prior to 8.2.4974.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 17, 2022Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.CVE-2022-1733 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.4968.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 12, 2022NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938.CVE-2022-1674 · Other software · vim · reported by security@huntr.devMedium 5.5
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 in GitHub repository vim/vim prior to 8.2.4938. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2733 allows attackers to cause a denial of service (application crash) via a crafted input.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 10, 2022Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925.CVE-2022-1629 · Other software · vim · reported by security@huntr.devHigh 7.8
Buffer Over-read in function find_next_quote in GitHub repository vim/vim prior to 8.2.4925. This vulnerabilities are capable of crashing software, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 10, 2022Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919.CVE-2022-1621 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap buffer overflow in vim_strncpy find_word in GitHub repository vim/vim prior to 8.2.4919. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 8, 2022NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901.CVE-2022-1620 · Other software · vim · reported by security@huntr.devHigh 7.5
NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 in GitHub repository vim/vim prior to 8.2.4901. NULL Pointer Dereference in function vim_regexec_string at regexp.c:2729 allows attackers to cause a denial of service (application crash) via a crafted input.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 8, 2022Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899.CVE-2022-1619 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow in function cmdline_erase_chars in GitHub repository vim/vim prior to 8.2.4899. This vulnerabilities are capable of crashing software, modify memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
May 7, 2022Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895.CVE-2022-1616 · Other software · vim · reported by security@huntr.devHigh 7.8
Use after free in append_command in GitHub repository vim/vim prior to 8.2.4895. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Apr 21, 2022A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager (VIM) could allow an authenticated, local attacker to access cCVE-2022-20732 · Network & remote access · Cisco · reported by psirt@cisco.comHigh 7.8
A vulnerability in the configuration file protections of Cisco Virtualized Infrastructure Manager (VIM) could allow an authenticated, local attacker to access confidential information and elevate privileges on an affected device. This vulnerability is due to improper access permissions for certain configuration files. An attacker with low-privileged credentials could exploit this vulnerability by accessing an affected device and reading the affected configuration files. A successful exploit could allow the attacker to obtain internal database credentials, which the attacker could use to view and modify the contents of the database. The attacker could use this access to the database to elevate privileges on the affected device.
Product
Cisco Virtualized Infrastructure Manager
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tools.cisco.com tools.cisco.com
Apr 21, 2022Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.CVE-2022-1420 · Other software · vim · reported by security@huntr.devMedium 5.5
Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4774.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Apr 17, 2022global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763.CVE-2022-1381 · Other software · vim · reported by security@huntr.devHigh 7.8
global heap buffer overflow in skip_range in GitHub repository vim/vim prior to 8.2.4763. This vulnerability is capable of crashing software, Bypass Protection Mechanism, Modify Memory, and possible remote execution
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org
Mar 30, 2022heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.CVE-2022-1160 · Other software · vim · reported by security@huntr.devHigh 7.8
heap buffer overflow in get_one_sourceline in GitHub repository vim/vim prior to 8.2.4647.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Mar 30, 2022Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.CVE-2022-1154 · Other software · vim · reported by security@huntr.devHigh 7.8
Use after free in utf_ptr2char in GitHub repository vim/vim prior to 8.2.4646.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record github.com huntr.dev
Mar 14, 2022Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.CVE-2022-0943 · Other software · vim · reported by security@huntr.devHigh 7.8
Heap-based Buffer Overflow occurs in vim in GitHub repository vim/vim prior to 8.2.4563.
Product
vim/vim
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record seclists.org seclists.org

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.