Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 9 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
33added in the last 30 days
570new WordPress flaws this week
391,397entries in the database

2,813 results · page 51 of 57

  • May 30, 2001Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.CVE-2001-0781 · Other software · Pi-soft · reported by MITREHigh 7.5

    Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.

    Product
    Spoonftp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 21, 2001Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.CVE-2001-1337 · Other software · Beck IPC Gmbh · reported by MITREMedium 5

    Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to cause a denial of service via a long HTTP request.

    Product
    IPC AT Chip Embedded-webserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET CVE-2001-0168 · Other software · ATT · reported by MITREHigh 10

    Buffer overflow in AT&T WinVNC (Virtual Network Computing) server 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long HTTP GET request when the DebugLevel registry key is greater than 0.

    Product
    Winvnc
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.CVE-2001-0285 · Websites & servers · A1webserver · reported by MITREHigh 10

    Buffer overflow in A1 HTTP server 1.0a allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.

    Product
    Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.CVE-2001-0282 · Other software · Guido Frassetto · reported by MITREHigh 10

    SEDUM 2.1 HTTP server allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP request.

    Product
    Sedum
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.CVE-2001-0280 · Other software · Atrium Software · reported by MITREHigh 10

    Buffer overflow in MERCUR SMTP server 3.30 allows remote attackers to execute arbitrary commands via a long EXPN command.

    Product
    Mercur
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.CVE-2001-0275 · Other software · Moby · reported by MITRELow 2.1

    Moby Netsuite Web Server 1.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request.

    Product
    Netsuite Web Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.CVE-2001-0236 · Other software · SUN · reported by MITREHigh 10

    Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.CVE-2001-0198 · Computers, phones & browsers · Apple · reported by MITREHigh 7.6

    Buffer overflow in QuickTime Player plugin 4.1.2 (Japanese) allows remote attackers to execute arbitrary commands via a long HREF parameter in an EMBED tag.

    Product
    Quicktime
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.CVE-2001-0194 · Other software · Easy Software Products · reported by MITREHigh 10

    Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a long input line.

    Product
    Cups
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.CVE-2001-0171 · Other software · Whitsoft · reported by MITREHigh 10

    Buffer overflow in SlimServe HTTPd 1.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long GET request.

    Product
    Slimserve
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.CVE-2001-0296 · Other software · Texas Imperial Software · reported by MITREHigh 10

    Buffer overflow in WFTPD Pro 3.00 allows remote attackers to execute arbitrary commands via a long CWD command.

    Product
    Wftpd Pro
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFaCVE-2001-0167 · Other software · ATT · reported by MITREHigh 7.6

    Buffer overflow in AT&T WinVNC (Virtual Network Computing) client 3.3.3r7 and earlier allows remote attackers to execute arbitrary commands via a long rfbConnFailed packet with a long reason string.

    Product
    Winvnc
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.CVE-2001-0165 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET reqCVE-2001-0227 · Other software · Biblioscape · reported by MITREMedium 5

    Buffer overflow in BiblioWeb web server 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET request.

    Product
    Biblioweb Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 3, 2001Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET requeCVE-2001-0298 · Network & remote access · Sapio Design LTD · reported by MITREMedium 5

    Buffer overflow in WebReflex 1.55 HTTPd allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.

    Product
    Webreflex
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 21, 2001Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argumentCVE-2001-1442 · Other software · ISC · reported by MITREMedium 4.6

    Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.

    Product
    INN
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 26, 2001Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).CVE-2001-0223 · Other software · Spawar.navy.mil · reported by MITREHigh 10

    Buffer overflow in wwwwais allows remote attackers to execute arbitrary commands via a long QUERY_STRING (HTTP GET request).

    Product
    Wwwwais.25.c
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 26, 2001Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup CVE-2001-0207 · Other software · Pierre Beyssac · reported by MITREHigh 10

    Buffer overflow in bing allows remote attackers to execute arbitrary commands via a long hostname, which is copied to a small buffer after a reverse DNS lookup using the gethostbyaddr function.

    Product
    Bing
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 26, 2001Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directoryCVE-2001-0172 · Other software · Hans Reiser · reported by MITREHigh 7.2

    Buffer overflow in ReiserFS 3.5.28 in SuSE Linux allows local users to cause a denial of service and possibly execute arbitrary commands by via a long directory name.

    Product
    Reiserfs
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 26, 2001Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long DescrCVE-2001-0233 · Other software · Matthew Smith · reported by MITREHigh 10

    Buffer overflow in micq client 0.4.6 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long Description field.

    Product
    Micq
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2001Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.CVE-2001-0115 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2001Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.CVE-2000-0306 · Other software · SCO · reported by MITREHigh 10

    Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

    Product
    Openserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2001Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.CVE-2001-0124 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2001Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.CVE-2001-0110 · Other software · Iomega · reported by MITREHigh 7.2

    Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.

    Product
    Jazip
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 12, 2001ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.CVE-2001-0121 · Other software · Storagesoft · reported by MITREMedium 5

    ImageCast Control Center 4.1.0 allows remote attackers to cause a denial of service (resource exhaustion or system crash) via a long string to port 12002.

    Product
    Imagecast Ic3
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 16, 2001Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paralleCVE-2001-0044 · Other software · Lexmark · reported by MITREHigh 7.2

    Multiple buffer overflows in Lexmark MarkVision printer driver programs allows local users to gain privileges via long arguments to the cat_network, cat_paraller, and cat_serial commands.

    Product
    Markvision
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.CVE-2001-0007 · Other software · Netscreen · reported by MITREMedium 5

    Buffer overflow in NetScreen Firewall WebUI allows remote attackers to cause a denial of service via a long URL request to the web administration interface.

    Product
    Screen OS
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain namCVE-2001-0029 · Other software · Igor Khasilev · reported by MITREHigh 10

    Buffer overflow in oops WWW proxy server 1.4.6 (and possibly other versions) allows remote attackers to execute arbitrary commands via a long host or domain name that is obtained from a reverse DNS lookup.

    Product
    Oops Proxy Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show CVE-2001-0019 · Network & remote access · Cisco · reported by MITRELow 2.1

    Arrowpoint (aka Cisco Content Services, or CSS) allows local users to cause a denial of service via a long argument to the "show script," "clear script," "show archive," "clear archive," "show log," or "clear log" commands.

    Product
    Arrowpoint
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" striCVE-2001-0064 · Other software · Alt-n · reported by MITREMedium 5

    Webconfig, IMAP, and other services in MDaemon 3.5.0 and earlier allows remote attackers to cause a denial of service via a long URL terminated by a "\r\n" string.

    Product
    Mdaemon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM coCVE-2001-0070 · Other software · Upland Solutions · reported by MITREHigh 10

    Buffer overflow in 1st Up Mail Server 4.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long MAIL FROM command.

    Product
    1st UP Mail Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command.CVE-2001-0065 · Other software · Max-wilhelm Bruker · reported by MITREHigh 10

    Buffer overflow in bftpd 1.0.13 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long SITE CHOWN command.

    Product
    Bftpd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 12, 2001Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.CVE-2001-0098 · Websites & servers · BEA · reported by MITREHigh 10

    Buffer overflow in Bea WebLogic Server before 5.1.0 allows remote attackers to execute arbitrary commands via a long URL that begins with a ".." string.

    Product
    Weblogic Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 9, 2001Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.CVE-2001-1454 · Other software · Oracle · reported by MITREHigh 7.5

    Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 9, 2001Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.CVE-2001-1453 · Other software · Oracle · reported by MITREHigh 7.5

    Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.

    Product
    Mysql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.CVE-2000-1097 · Network & remote access · Sonicwall · reported by MITREMedium 5

    The web server for the SonicWALL SOHO firewall allows remote attackers to cause a denial of service via a long username in the authentication page.

    Product
    Soho Firewall
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.CVE-2000-1152 · Other software · BE · reported by MITREMedium 5

    Browser IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.

    Product
    Beos
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src"CVE-2000-1094 · Other software · AOL · reported by MITREHigh 7.5

    Buffer overflow in AOL Instant Messenger (AIM) before 4.3.2229 allows remote attackers to execute arbitrary commands via a "buddyicon" command with a long "src" argument.

    Product
    AIM
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NUCVE-2000-1107 · Other software · Suse · reported by MITREMedium 5

    in.identd ident server in SuSE Linux 6.x and 7.0 allows remote attackers to cause a denial of service via a long request, which causes the server to access a NULL pointer and crash.

    Product
    Suse Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.CVE-2000-1121 · Other software · IBM · reported by MITREHigh 7.2

    Buffer overflow in enq command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long -M argument.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.CVE-2000-1122 · Other software · IBM · reported by MITREHigh 7.2

    Buffer overflow in setclock command in IBM AIX 4.3.x and earlier may allow local users to execute arbitrary commands via a long argument.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.CVE-2000-1124 · Other software · IBM · reported by MITREHigh 7.2

    Buffer overflow in piobe command in IBM AIX 4.3.x allows local users to gain privileges via long environmental variables.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.CVE-2000-1147 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6

    Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.

    Product
    Internet Information Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "TerminaCVE-2000-1149 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5

    Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.

    Product
    Windows NT
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.CVE-2000-1150 · Other software · Xavier Ducrohet · reported by MITREMedium 5

    Felix IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.

    Product
    Felix
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.CVE-2000-1151 · Other software · Abisoft · reported by MITREMedium 5

    Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.

    Product
    Baxter
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.CVE-2000-1157 · Other software · Network Associates · reported by MITREHigh 10

    Buffer overflow in NAI Sniffer Agent allows remote attackers to execute arbitrary commands via a long SNMP community name.

    Product
    Sniffer Agent
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.CVE-2000-1168 · Websites & servers · IBM · reported by MITREHigh 7.5

    IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request.

    Product
    Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.CVE-2000-1170 · Other software · Pelesoft · reported by MITREHigh 7.5

    Buffer overflow in Netsnap webcam HTTP server before 1.2.9 allows remote attackers to execute arbitrary commands via a long GET request.

    Product
    Netsnap
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.