Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
33added in the last 30 days
570new WordPress flaws this week
391,397entries in the database

2,813 results · page 52 of 57

  • Jan 9, 2001Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long usernCVE-2000-1174 · Other software · Ethereal Group · reported by MITREHigh 7.5

    Multiple buffer overflows in AFS ACL parser for Ethereal 0.8.13 and earlier allows remote attackers to execute arbitrary commands via a packet with a long username.

    Product
    Ethereal
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.CVE-2000-1093 · Other software · AOL · reported by MITREHigh 7.5

    Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.

    Product
    Instant Messenger
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.CVE-2000-1175 · Other software · JAN Hubicka · reported by MITREHigh 7.2

    Buffer overflow in Koules 1.4 allows local users to execute arbitrary commands via a long command line argument.

    Product
    Koules
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.CVE-2000-1180 · Other software · Oracle · reported by MITREMedium 4.6

    Buffer overflow in cmctl program in Oracle 8.1.5 Connection Manager Control allows local users to gain privileges via a long command line argument.

    Product
    Oracle8i
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.CVE-2000-1183 · Other software · NEC · reported by MITREHigh 7.2

    Buffer overflow in socks5 server on Linux allows attackers to execute arbitrary commands via a long connection request.

    Product
    Socks 5
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.CVE-2000-1119 · Other software · IBM · reported by MITREMedium 4.6

    Buffer overflow in setsenv command in IBM AIX 4.3.x and earlier allows local users to execute arbitrary commands via a long "x=" argument.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.CVE-2000-1155 · Other software · JOE Kloss · reported by MITREMedium 5

    RHDaemon in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.

    Product
    Robinhood
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.CVE-2000-1154 · Other software · JOE Kloss · reported by MITREMedium 5

    RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service via long HTTP request.

    Product
    Robinhood
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form fieldCVE-2000-1187 · Other software · Netscape · reported by MITREHigh 7.5

    Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.

    Product
    Communicator
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.CVE-2000-1153 · Other software · Kenny Carruthers · reported by MITREMedium 5

    PostMaster 1.0 in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL.

    Product
    Postmaster
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 9, 2001Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME heaCVE-2000-1186 · Other software · PHF · reported by MITREHigh 7.5

    Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header.

    Product
    PHF
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.CVE-2000-0971 · Other software · Avirt · reported by MITREHigh 10

    Avirt Mail 4.0 and 4.2 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long "RCPT TO" or "MAIL FROM" command.

    Product
    Avirt Mail Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.CVE-2000-0987 · Other software · Oracle · reported by MITREMedium 4.6

    Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line parameter.

    Product
    Internet Directory
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.CVE-2000-0985 · Other software · Nevis Systems · reported by MITREHigh 10

    Buffer overflow in All-Mail 1.1 allows remote attackers to execute arbitrary commands via a long "MAIL FROM" or "RCPT TO" command.

    Product
    All-mail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command lCVE-2000-0976 · Other software · Xfree86 Project · reported by MITREMedium 4.6

    Buffer overflow in xlib in XFree 3.3.x possibly allows local users to execute arbitrary commands via a long DISPLAY environment variable or a -display command line parameter.

    Product
    Xlib
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error mCVE-2000-0973 · Other software · Daniel Stenberg · reported by MITREHigh 10

    Buffer overflow in curl earlier than 6.0-1.1, and curl-ssl earlier than 6.0-1.2, allows remote attackers to execute arbitrary commands by forcing a long error message to be generated.

    Product
    Curl
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.CVE-2000-0963 · Other software · Immunix · reported by MITREHigh 7.2

    Buffer overflow in ncurses library allows local users to execute arbitrary commands via long environmental information such as TERM or TERMINFO_DIRS.

    Product
    Immunix
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.CVE-2000-0961 · Other software · Netscape · reported by MITREHigh 10

    Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.

    Product
    Messaging Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER commaCVE-2000-0943 · Other software · Max-wilhelm Bruker · reported by MITREHigh 7.5

    Buffer overflow in bftp daemon (bftpd) 1.0.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER command.

    Product
    Bftpd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message contaCVE-2000-0931 · Other software · David Harris · reported by MITREHigh 7.5

    Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.

    Product
    Pegasus Mail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.CVE-2000-0909 · Other software · University Of Washington · reported by MITREHigh 7.5

    Buffer overflow in the automatic mail checking component of Pine 4.21 and earlier allows remote attackers to execute arbitrary commands via a long From: header.

    Product
    Pine
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in tCVE-2000-0908 · Other software · Netcplus · reported by MITREMedium 5

    BrowseGate 2.80 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long Authorization or Referer MIME headers in the HTTP request.

    Product
    Browsegate
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.CVE-2000-0907 · Other software · Etype · reported by MITREHigh 7.5

    EServ 2.92 Build 2982 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via long HELO and MAIL FROM commands.

    Product
    Eserv
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a loCVE-2000-0885 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5

    Buffer overflows in Microsoft Network Monitor (Netmon) allow remote attackers to execute arbitrary commands via a long Browser Name in a CIFS Browse Frame, a long SNMP community name, or a long username or filename in an SMB session, aka the "Netmon Protocol Parsing" vulnerability. NOTE: It is highly likely that this candidate will be split into multiple candidates.

    Product
    Systems Management Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 19, 2000Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.CVE-2000-0968 · Other software · Valve Software · reported by MITREHigh 10

    Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon command.

    Product
    Half-life Dedicated Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.CVE-2000-1029 · Other software · ISC · reported by MITREHigh 10

    Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.

    Product
    Bind
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.CVE-2000-1028 · Other software · HP · reported by MITREHigh 7.2

    Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long CVE-2000-1021 · Other software · Alt-n · reported by MITREHigh 7.5

    Heap overflow in WebConfig in Mdaemon 3.1.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long URL.

    Product
    Mdaemon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental vCVE-2000-1011 · Other software · Freebsd · reported by MITREHigh 7.2

    Buffer overflow in catopen() function in FreeBSD 5.0 and earlier, and possibly other OSes, allows local users to gain root privileges via a long environmental variable.

    Product
    Freebsd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.CVE-2000-1007 · Other software · Symantec · reported by MITREMedium 5

    I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors.

    Product
    I-gear
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .sCVE-2000-1077 · Other software · Iplanet · reported by MITREHigh 10

    Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

    Product
    Iplanet Web Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNCVE-2000-1066 · Other software · Freebsd · reported by MITREMedium 5

    The getnameinfo function in FreeBSD 4.1.1 and earlier, and possibly other operating systems, allows a remote attacker to cause a denial of service via a long DNS hostname.

    Product
    Freebsd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.CVE-2000-1049 · Other software · Macromedia · reported by MITREMedium 5

    Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters.

    Product
    Jrun
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long CVE-2000-1035 · Other software · Typsoft · reported by MITREHigh 10

    Buffer overflows in TYPSoft FTP Server 0.78 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long USER, PASS, or CWD command.

    Product
    Typsoft
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in CVE-2000-1034 · Computers, phones & browsers · Microsoft · reported by MITREHigh 10

    Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.

    Product
    Windows 2000
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 11, 2000Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.CVE-2000-1031 · Other software · HP · reported by MITREMedium 4.6

    Buffer overflow in dtterm in HP-UX 11.0 and HP Tru64 UNIX 4.0f through 5.1a allows local users to execute arbitrary code via a long -tn option.

    Product
    Hp-ux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.CVE-2000-0840 · Other software · Davide Libenzi · reported by MITREHigh 10

    Buffer overflow in XMail POP3 server before version 0.59 allows remote attackers to execute arbitrary commands via a long USER command.

    Product
    Xmail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.CVE-2000-0838 · Websites & servers · Fastream · reported by MITREMedium 5

    Fastream FUR HTTP server 1.0b allows remote attackers to cause a denial of service via a long GET request.

    Product
    FUR Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.CVE-2000-0836 · Other software · Broadgun Software · reported by MITREHigh 7.5

    Buffer overflow in CamShot WebCam Trial2.6 allows remote attackers to execute arbitrary commands via a long Authorization header.

    Product
    Camshot Webcam
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.CVE-2000-0833 · Other software · Jack DE Winter · reported by MITREHigh 10

    Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.

    Product
    Winsmtp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.CVE-2000-0831 · Other software · Fastream · reported by MITREHigh 7.5

    Buffer overflow in Fastream FTP++ 2.0 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long username.

    Product
    Ftp++ Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameteCVE-2000-0828 · Other software · Mobius · reported by MITREHigh 10

    Buffer overflow in ddicgi.exe in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long User-Agent parameter.

    Product
    Documentdirect For The Internet
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a tCVE-2000-0825 · Other software · Ipswitch · reported by MITREMedium 5

    Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.

    Product
    Imail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET requestCVE-2000-0826 · Other software · Mobius · reported by MITREHigh 10

    Buffer overflow in ddicgi.exe program in Mobius DocumentDirect for the Internet 1.2 allows remote attackers to execute arbitrary commands via a long GET request.

    Product
    Documentdirect For The Internet
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.CVE-2000-0875 · Other software · Texas Imperial Software · reported by MITREMedium 5

    WFTPD and WFTPD Pro 2.41 RC12 allows remote attackers to cause a denial of service by sending a long string of unprintable characters.

    Product
    Wftpd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.CVE-2000-0870 · Other software · Khamil Landross And Zack Jones · reported by MITREHigh 7.5

    Buffer overflow in EFTP allows remote attackers to cause a denial of service via a long string.

    Product
    Eftp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.CVE-2000-0865 · Other software · Tridia · reported by MITREHigh 7.2

    Buffer overflow in dvtermtype in Tridia Double Vision 3.07.00 allows local users to gain root privileges via a long terminal type argument.

    Product
    Doublevision
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.CVE-2000-0856 · Other software · Xs4all Data · reported by MITREHigh 7.5

    Buffer overflow in SunFTP build 9(1) allows remote attackers to cause a denial of service or possibly execute arbitrary commands via a long GET request.

    Product
    Xs4all Data Sunftp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image SerCVE-2000-0851 · Computers, phones & browsers · Microsoft · reported by MITREMedium 4.6

    Buffer overflow in the Still Image Service in Windows 2000 allows local users to gain additional privileges via a long WM_USER message, aka the "Still Image Service Privilege Escalation" vulnerability.

    Product
    Windows 2000
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 14, 2000Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.CVE-2000-0848 · Other software · IBM · reported by MITREHigh 10

    Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.

    Product
    Websphere Application Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.