Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 7 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
33added in the last 30 days
577new WordPress flaws this week
391,397entries in the database

2,600 results · page 52 of 52

  • Dec 31, 2004Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."CVE-2004-2441 · Other software · Kerio · reported by MITREHigh 10

    Unspecified vulnerability in Kerio MailServer before 6.0.3 has unknown impact and unknown remote attack vectors, related to a "potential security issue."

    Product
    Kerio Mailserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.CVE-2004-2453 · Other software · Tutti Nova · reported by MITREHigh 10

    Unknown vulnerability in Tutti Nova 0.10 through 0.12 (Beta) and 0.9.4, when register_globals is enabled, has unknown impact and attack vectors.

    Product
    Tutti Nova
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.CVE-2004-2470 · Other software · Madbms · reported by MITREHigh 10

    Unspecified vulnerability in MadBMS before 1.1.5 has unknown impact and attack vectors, related to logins.

    Product
    Madbms
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.CVE-2004-2500 · Other software · Ilohamail · reported by MITREHigh 10

    Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.

    Product
    Ilohamail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."CVE-2004-2537 · Other software · Netwin · reported by MITREHigh 10

    Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."

    Product
    Surgemail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions.CVE-2004-2590 · Other software · Meindlsoft · reported by MITREHigh 10

    Unspecified vulnerability in meindlSOFT Cute PHP Library (aka cphplib) 0.46 has unknown impact and attack vectors, related to regular expressions.

    Product
    Cute PHP Library
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the "useCVE-2004-2623 · Other software · Matthew Skala · reported by MITREHigh 10

    Unknown vulnerability in Rippy the Aggregator before 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the "user-controlled filter."

    Product
    Rippy The Aggregator
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags.CVE-2004-2644 · Other software · Asn.1 Compiler · reported by MITREHigh 10

    Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "ANY" type tags.

    Product
    Asn.1 Compiler
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length stCVE-2004-2645 · Other software · Asn.1 Compiler · reported by MITREHigh 10

    Unspecified vulnerability in ASN.1 Compiler (asn1c) before 0.9.7 has unknown impact and attack vectors when processing "CHOICE" types with "indefinite length structures."

    Product
    Asn.1 Compiler
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2004Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."CVE-2004-2744 · Websites & servers · Phplist · reported by MITREMedium 5

    Unspecified vulnerability in Tincan Limited PHPlist before 2.8.12 has unknown impact and attack vectors, related to a "security update release."

    Product
    Mailing List Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2004Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."CVE-2004-0513 · Computers, phones & browsers · Apple · reported by MITREHigh 10

    Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2004SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via aCVE-2004-0521 · Other software · SGI · reported by MITREHigh 10

    SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.

    Product
    Propack
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2004Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.CVE-2004-0518 · Computers, phones & browsers · Apple · reported by MITREHigh 7.5

    Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2004Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."CVE-2004-0231 · Other software · Midnight Commander · reported by MITRELow 2.1

    Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."

    Product
    Midnight Commander
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2004The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.CVE-2004-0229 · Other software · Gentoo · reported by MITREMedium 4.6

    The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.

    Product
    Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 6, 2004Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact.CVE-2004-0447 · Computers, phones & browsers · Linux · reported by MITREHigh 7.2

    Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 27, 2004Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectCVE-2004-0686 · Other software · Samba · reported by MITREMedium 5

    Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.

    Product
    Samba
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 4, 2004Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."CVE-2004-0383 · Computers, phones & browsers · Apple · reported by MITREHigh 7.2

    Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 4, 2004Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.CVE-2004-0382 · Computers, phones & browsers · Apple · reported by MITREHigh 7.2

    Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 29, 2004AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.CVE-2003-1007 · Computers, phones & browsers · Apple · reported by MITREMedium 5

    AppleFileServer (AFS) in Apple Mac OS X 10.2.8 and 10.3.2 does not properly handle certain malformed requests, with unknown impact.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 3, 2004Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.CVE-2002-1574 · Computers, phones & browsers · Linux · reported by MITREMedium 4.6

    Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 3, 2004Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.CVE-2004-0092 · Computers, phones & browsers · Apple · reported by MITREHigh 10

    Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 3, 2004Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.CVE-2004-0085 · Computers, phones & browsers · Apple · reported by MITREMedium 5

    Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 3, 2004Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.CVE-2004-0086 · Computers, phones & browsers · Apple · reported by MITREMedium 5

    Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.

    Product
    MAC OS X
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain seCVE-2003-1304 · Other software · Early Impact · reported by MITREMedium 5

    EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive database information via a direct request.

    Product
    Productcart
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."CVE-2003-1551 · Other software · Novell · reported by MITREHigh 10

    Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to "malicious script."

    Product
    Groupwise
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.CVE-2003-1525 · Other software · MY Photo Gallery · reported by MITREHigh 10

    Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.

    Product
    MY Photo Gallery
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2003Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certCVE-2003-1076 · Other software · SUN · reported by MITREHigh 7.2

    Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a .forward file.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 17, 2003Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.CVE-2003-0861 · Websites & servers · PHP · reported by MITREHigh 10

    Integer overflows in (1) base64_encode and (2) the GD library for PHP before 4.3.3 have unknown impact and unknown attack vectors.

    Product
    PHP
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 17, 2003Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.CVE-2003-0860 · Websites & servers · PHP · reported by MITREHigh 10

    Buffer overflows in PHP before 4.3.3 have unknown impact and unknown attack vectors.

    Product
    PHP
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 6, 2003"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.CVE-2003-0682 · Other software · Openbsd · reported by MITREHigh 7.5

    "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

    Product
    Openssh
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 27, 2003Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NCVE-2003-0635 · Other software · Novell · reported by MITREMedium 5

    Unknown vulnerability or vulnerabilities in Novell iChain 2.2 before Support Pack 1, with unknown impact, possibly related to unauthorized access to (1) NCPIP.NLM and (2) JSTCP.NLM.

    Product
    Ichain
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2003Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message pCVE-2003-0523 · Other software · Early Impact · reported by MITREMedium 6.8

    Cross-site scripting (XSS) vulnerability in msg.asp for certain versions of ProductCart allow remote attackers to execute arbitrary web script via the message parameter.

    Product
    Productcart
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2003The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.CVE-2003-0573 · Other software · SGI · reported by MITREMedium 5

    The DNS callbacks in nsd in SGI IRIX 6.5.x through 6.5.20f, and possibly earlier versions, do not perform sufficient sanity checking, with unknown impact.

    Product
    Irix
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 18, 2003Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parametCVE-2003-0522 · Other software · Early Impact · reported by MITREHigh 10

    Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to (1) gain access to the admin control panel via the idadmin parameter to login.asp or (2) gain other privileges via the Email parameter to Custva.asp.

    Product
    Productcart
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 11, 2003Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."CVE-2002-1406 · Other software · HP · reported by MITREHigh 7.2

    Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to "Unexpected behavior."

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 17, 2003Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, bCVE-2002-1399 · Other software · Postgresql · reported by MITREHigh 10

    Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).

    Product
    Postgresql
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.CVE-2002-2187 · Other software · Macromedia · reported by MITREMedium 5

    Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.

    Product
    Jrun
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wCVE-2002-1573 · Computers, phones & browsers · Linux · reported by MITREHigh 10

    Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to "wrap handling."

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Buffer overflow in lscfg of unknown versions of AIX has unknown impact.CVE-2002-1686 · Other software · IBM · reported by MITREHigh 10

    Buffer overflow in lscfg of unknown versions of AIX has unknown impact.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.CVE-2002-1690 · Other software · IBM · reported by MITREHigh 10

    Unknown vulnerability in AIX before 4.0 with unknown attack vectors and unknown impact, aka "security issue," as fixed by APAR IY28225.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectCVE-2002-1918 · Email & office · Microsoft · reported by MITREHigh 10

    Buffer overflow in Microsoft Active Data Objects (ADO) in Microsoft MDAC 2.5 through 2.7 allows remote attackers to have unknown impact with unknown attack vectors. NOTE: due to the lack of details available regarding this issue, perhaps it should be REJECTED.

    Product
    Data Access Components
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.CVE-2002-2209 · Other software · Pablo Software Solutions · reported by MITREHigh 10

    Unspecified "security vulnerability" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.

    Product
    Baby FTP Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."CVE-2002-2374 · Other software · SUN · reported by MITREHigh 10

    Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."

    Product
    Patchpro
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2002Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.CVE-2002-1572 · Computers, phones & browsers · Linux · reported by MITREHigh 10

    Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 28, 2002Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain CVE-2002-1226 · Other software · KTH · reported by MITREHigh 10

    Unknown vulnerabilities in Heimdal before 0.5 with unknown impact, possibly in the (1) kadmind and (2) kdc servers, may allow remote or local attackers to gain root or other access, but not via buffer overflows (CVE-2002-1225).

    Product
    Heimdal
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 17, 2001Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.CVE-2001-1395 · Computers, phones & browsers · Linux · reported by MITRELow 3.6

    Unknown vulnerability in sockfilter for Linux kernel before 2.2.19 related to "boundary cases," with unknown impact.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 17, 2001Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.CVE-2001-1396 · Computers, phones & browsers · Linux · reported by MITRELow 3.6

    Unknown vulnerabilities in strnlen_user for Linux kernel before 2.2.19, with unknown impact.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 2000Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "gravCVE-2000-1241 · Other software · Sips · reported by MITREHigh 10

    Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 has an unknown impact and attack vectors, related to a "grave security fault."

    Product
    Sips
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact.CVE-1999-1592 · Other software · Sendmail · reported by MITREHigh 7.5

    Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might overlap CVE-1999-0129.

    Product
    Sendmail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.