Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 1 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
33added in the last 30 days
542new WordPress flaws this week
391,528entries in the database

2,813 results · page 55 of 57

  • Apr 16, 2000Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.CVE-2000-0291 · Other software · SUN · reported by MITREMedium 4.6

    Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document.

    Product
    Staroffice
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 10, 2000The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.CVE-2000-0274 · Other software · Bray Systems · reported by MITRELow 2.1

    The Linux trustees kernel patch allows attackers to cause a denial of service by accessing a file or directory with a long name.

    Product
    Linux Trustees
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 4, 2000Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long heaCVE-2000-0299 · Computers, phones & browsers · Apple · reported by MITREMedium 5

    Buffer overflow in WebObjects.exe in the WebObjects Developer 4.5 package allows remote attackers to cause a denial of service via an HTTP request with long headers such as Accept.

    Product
    Webobjects
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 3, 2000Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.CVE-2000-0280 · Other software · Realnetworks · reported by MITRELow 2.6

    Buffer overflow in the RealNetworks RealPlayer client versions 6 and 7 allows remote attackers to cause a denial of service via a long Location URL.

    Product
    Realplayer
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 31, 2000Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.CVE-2000-0290 · Websites & servers · 4d · reported by MITREMedium 5

    Buffer overflow in Webstar HTTP server allows remote attackers to cause a denial of service via a long GET request.

    Product
    Webstar Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 26, 2000Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.CVE-2000-0281 · Other software · Napster · reported by MITRELow 2.1

    Buffer overflow in the Napster client beta 5 allows remote attackers to cause a denial of service via a long message.

    Product
    Napster Client
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 17, 2000Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.CVE-2000-0238 · Other software · Symantec · reported by MITREMedium 5

    Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.

    Product
    Norton Antivirus
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 15, 2000Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.CVE-2000-0239 · Other software · Atrium Software · reported by MITREMedium 5

    Buffer overflow in the MERCUR WebView WebMail server allows remote attackers to cause a denial of service via a long mail_user parameter in the GET request.

    Product
    Mercur Imap4 Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 13, 2000Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.CVE-2000-0230 · Other software · Halloween · reported by MITREHigh 7.2

    Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME environmental variable.

    Product
    Halloween Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 10, 2000Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.CVE-2000-0223 · Other software · SAM Hawker · reported by MITREHigh 7.2

    Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges via a long parameter.

    Product
    Wmcdplay
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Mar 9, 2000Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.CVE-2000-0175 · Other software · SUN · reported by MITREHigh 10

    Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command.

    Product
    Staroffice
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 28, 2000Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.CVE-2000-0186 · Other software · Freebsd · reported by MITREHigh 7.2

    Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long command line argument.

    Product
    Freebsd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 27, 2000Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.CVE-2000-0209 · Other software · University Of Kansas · reported by MITREHigh 7.6

    Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a malicious web page.

    Product
    Lynx
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 21, 2000Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.CVE-2000-0166 · Other software · Interaccess · reported by MITREHigh 10

    Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.

    Product
    Interaccess Telnetd Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 16, 2000Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-0158 · Other software · SCO · reported by MITREHigh 7.5

    Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.

    Product
    Openserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 15, 2000IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.CVE-2000-0167 · Computers, phones & browsers · Microsoft · reported by MITRELow 2.1

    IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.

    Product
    Internet Information Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 7, 2000The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.CVE-2000-0146 · Other software · Novell · reported by MITREMedium 5

    The Java Server in the Novell GroupWise Web Access Enhancement Pack allows remote attackers to cause a denial of service via a long URL to the servlet.

    Product
    Groupwise
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 6, 2000Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.CVE-2000-0472 · Other software · ISC · reported by MITRELow 3.6

    Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.

    Product
    INN
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 3, 2000Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.CVE-2000-0218 · Other software · Caldera · reported by MITREHigh 7.2

    Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

    Product
    Openlinux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 1, 2000Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.CVE-2000-0131 · Other software · Jgaa · reported by MITREMedium 5

    Buffer overflow in War FTPd 1.6x allows users to cause a denial of service via long MKD and CWD commands.

    Product
    Warftpd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 26, 2000Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.CVE-2000-0096 · Computers, phones & browsers · Qualcomm · reported by MITREHigh 7.2

    Buffer overflow in qpopper 3.0 beta versions allows local users to gain privileges via a long LIST command.

    Product
    Qpopper
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 21, 2000Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.CVE-2000-0091 · Other software · Inter7 · reported by MITREHigh 10

    Buffer overflow in vchkpw/vpopmail POP authentication package allows remote attackers to gain root privileges via a long username or password.

    Product
    Vpopmail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 18, 2000Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.CVE-2000-0099 · Other software · SCO · reported by MITREHigh 7.2

    Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.

    Product
    Unixware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 17, 2000Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.CVE-2000-0065 · Other software · Avtronics · reported by MITREHigh 10

    Buffer overflow in InetServ 3.0 allows remote attackers to execute commands via a long GET request.

    Product
    Inetserv
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 6, 2000Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.CVE-2000-0055 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 4, 2000Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.CVE-2000-0049 · Other software · Nullsoft · reported by MITREHigh 7.2

    Buffer overflow in Winamp client allows remote attackers to execute commands via a long entry in a .pls file.

    Product
    Winamp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 4, 2000Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.CVE-1999-0744 · Other software · Netscape · reported by MITREHigh 7.5

    Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.

    Product
    Enterprise Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jan 1, 2000Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.CVE-1999-0964 · Other software · Freebsd · reported by MITREHigh 7.2

    Buffer overflow in FreeBSD setlocale in the libc module allows attackers to execute arbitrary code via a long PATH_LOCALE environment variable.

    Product
    Freebsd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, orCVE-1999-1334 · Other software · ELM Development Group · reported by MITREHigh 7.5

    Multiple buffer overflows in filter command in Elm 2.4 allows attackers to execute arbitrary commands via (1) long From: headers, (2) long Reply-To: headers, or (3) via a long -f (filterfile) command line argument.

    Product
    ELM
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.CVE-2000-0011 · Other software · Analogx · reported by MITREHigh 7.5

    Buffer overflow in AnalogX SimpleServer:WWW HTTP server allows remote attackers to execute commands via a long GET request.

    Product
    Simpleserver WWW
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning withCVE-1999-1588 · Other software · sun · reported by MITRECritical 9.8

    Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to the listen (aka System V listener) port, TCP port 2766.

    Product
    solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which cCVE-1999-1359 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5

    When the Ntconfig.pol file is used on a server whose name is longer than 13 characters, Windows NT does not properly enforce policies for global groups, which could allow users to bypass restrictions that were intended by those policies.

    Product
    Windows NT
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK CVE-1999-1094 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.5

    Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" protocol, aka the "MK Overrun security issue."

    Product
    Internet Explorer
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 31, 1999Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.CVE-1999-1327 · Other software · Redhat · reported by MITREHigh 7.2

    Buffer overflow in linuxconf 1.11r11-rh2 on Red Hat Linux 5.1 allows local users to gain root privileges via a long LANG environmental variable.

    Product
    Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 1999Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.CVE-2000-0003 · Other software · SCO · reported by MITREHigh 10

    Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

    Product
    Unixware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 30, 1999Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.CVE-2000-0043 · Websites & servers · Camshot · reported by MITREHigh 7.5

    Buffer overflow in CamShot WebCam HTTP server allows remote attackers to execute commands via a long GET request.

    Product
    Webcam Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 29, 1999Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.CVE-2000-0042 · Other software · CSM · reported by MITREHigh 10

    Buffer overflow in CSM mail server allows remote attackers to cause a denial of service or execute commands via a long HELO command.

    Product
    Mail Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 27, 1999Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.CVE-2000-0060 · Other software · Avirt · reported by MITREMedium 5

    Buffer overflow in aVirt Rover POP3 server 1.1 allows remote attackers to cause a denial of service via a long user name.

    Product
    Rover
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 23, 1999RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.CVE-2000-0001 · Other software · Realnetworks · reported by MITREMedium 5

    RealMedia server allows remote attackers to cause a denial of service via a long ramgen request.

    Product
    Realserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 22, 1999Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.CVE-2000-0002 · Other software · Zbsoft · reported by MITREHigh 10

    Buffer overflow in ZBServer Pro 1.50 allows remote attackers to execute commands via a long GET request.

    Product
    Zbserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 21, 1999Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.CVE-2000-0026 · Other software · Windowmaker · reported by MITREHigh 10

    Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

    Product
    Wmmon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 21, 1999Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.CVE-2000-0017 · Other software · Redhat · reported by MITREHigh 10

    Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.

    Product
    Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 21, 1999Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.CVE-2000-0023 · Other software · Lotus · reported by MITREMedium 5

    Buffer overflow in Lotus Domino HTTP server allows remote attackers to cause a denial of service via a long URL.

    Product
    Domino Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 15, 1999Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.CVE-1999-0996 · Other software · Infoseek · reported by MITREHigh 7.5

    Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.

    Product
    Ultraseek Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 7, 1999Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.CVE-1999-0973 · Other software · SUN · reported by MITREHigh 10

    Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 6, 1999Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.CVE-1999-0991 · Other software · Goodtech · reported by MITREMedium 5

    Buffer overflow in GoodTech Telnet Server NT allows remote users to cause a denial of service via a long login name.

    Product
    Telnet Server NT
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 3, 1999Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.CVE-1999-0865 · Other software · Stalker · reported by MITREMedium 5

    Buffer overflow in CommuniGatePro via a long string to the HTTP configuration port.

    Product
    Communigate Pro
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 30, 1999Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.CVE-1999-0840 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.

    Product
    Sunos
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 30, 1999Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.CVE-1999-0841 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.

    Product
    Sunos
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 25, 1999Buffer overflow in SCO su program allows local users to gain root access via a long username.CVE-1999-0845 · Other software · SCO · reported by MITREHigh 7.2

    Buffer overflow in SCO su program allows local users to gain root access via a long username.

    Product
    Unixware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.