Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 2 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,766exploited flaws on CISA’s list
33added in the last 30 days
542new WordPress flaws this week
391,528entries in the database

2,813 results · page 56 of 57

  • Nov 24, 1999Denial of service in MDaemon WorldClient and WebConfig services via a long URL.CVE-1999-0844 · Other software · Deerfield · reported by MITREMedium 5

    Denial of service in MDaemon WorldClient and WebConfig services via a long URL.

    Product
    Mdaemon
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 20, 1999Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.CVE-1999-0818 · Other software · SUN · reported by MITREHigh 7.2

    Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 17, 1999Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.CVE-1999-1519 · Other software · Gene6 · reported by MITREMedium 5

    Gene6 G6 FTP Server 2.0 allows a remote attacker to cause a denial of service (resource exhaustion) via a long (1) user name or (2) password.

    Product
    G6 FTP Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 16, 1999Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handledCVE-1999-1457 · Websites & servers · Thttpd · reported by MITREHigh 7.5

    Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long date string, which is not properly handled by the tdate_parse function.

    Product
    Thttpd Http Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 15, 1999Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail mesCVE-1999-1190 · Other software · Admiral Systems · reported by MITREHigh 10

    Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands via a long "From" header in an e-mail message.

    Product
    Emailclub
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 12, 1999The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerabCVE-2000-0330 · Computers, phones & browsers · Microsoft · reported by MITREHigh 7.6

    The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.

    Product
    Windows 95
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 10, 1999Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in thCVE-1999-1511 · Other software · Artisoft · reported by MITREHigh 7.5

    Buffer overflows in Xtramail 1.11 allow attackers to cause a denial of service (crash) and possibly execute arbitrary commands via (1) a long PASS command in the POP3 service, (2) a long HELO command in the SMTP service, or (3) a long user name in the Control Service.

    Product
    Xtramail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 1999Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop imaCVE-1999-1112 · Other software · Irfanview · reported by MITREHigh 7.5

    Buffer overflow in IrfanView32 3.07 and earlier allows attackers to execute arbitrary commands via a long string after the "8BPS" image type in a Photo Shop image header.

    Product
    Irfanview
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 9, 1999Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.CVE-1999-0832 · Other software · Debian · reported by MITREHigh 10

    Buffer overflow in NFS server on Linux allows attackers to execute commands via a long pathname.

    Product
    Debian Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 8, 1999A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.CVE-2001-0679 · Other software · Trend Micro · reported by MITREHigh 10

    A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.

    Product
    Interscan Viruswall
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 7, 1999Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTPCVE-1999-1533 · Other software · Trend Micro · reported by MITREHigh 7.5

    Eicon Technology Diva LAN ISDN modem allows a remote attacker to cause a denial of service (hang) via a long password argument to the login.htm file in its HTTP service.

    Product
    Interscan Viruswall
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 4, 1999Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.CVE-1999-0896 · Other software · Realnetworks · reported by MITREHigh 10

    Buffer overflow in RealNetworks RealServer administration utility allows remote attackers to execute arbitrary commands via a long username and password.

    Product
    Realserver G2
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 4, 1999Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability tCVE-1999-1571 · Other software · SCO · reported by MITREHigh 7.2

    Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.

    Product
    Openserver
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 4, 1999Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.CVE-1999-1340 · Other software · Hylafax · reported by MITREHigh 7.2

    Buffer overflow in faxalter in hylafax 4.0.2 allows local users to gain privileges via a long -m command line argument.

    Product
    Hylafax
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 4, 1999Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string CVE-1999-1065 · Other software · Palm Pilot · reported by MITREHigh 7.5

    Palm Pilot HotSync Manager 3.0.4 in Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 14238 while the manager is in network mode.

    Product
    Hotsync Manager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 3, 1999Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.CVE-1999-0904 · Other software · Byte Fusion · reported by MITREMedium 5

    Buffer overflow in BFTelnet allows remote attackers to cause a denial of service via a long username.

    Product
    Bftelnet
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 2, 1999Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tagCVE-1999-1531 · Other software · IBM · reported by MITREHigh 7.5

    Buffer overflow in IBM HomePagePrint 1.0.7 for Windows98J allows a malicious Web site to execute arbitrary code on a viewer's system via a long IMG_SRC HTML tag.

    Product
    Homepageprint
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Nov 1, 1999Buffer overflow in SCO UnixWare Xsco command via a long argument.CVE-1999-0830 · Other software · SCO · reported by MITREHigh 7.2

    Buffer overflow in SCO UnixWare Xsco command via a long argument.

    Product
    Unixware
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 31, 1999Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long aCVE-1999-1577 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5.1

    Buffer overflow in HHOpen ActiveX control (hhopen.ocx) 1.0.0.1 for Internet Explorer 4.01 and 5 allows remote attackers to execute arbitrary commands via long arguments to the OpenHelp method.

    Product
    Internet Explorer
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 29, 1999Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.CVE-1999-1532 · Other software · Netscape · reported by MITREMedium 5

    Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.

    Product
    Messaging Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 28, 1999Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.CVE-1999-1226 · Other software · Netscape · reported by MITRELow 2.6

    Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.

    Product
    Communicator
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 28, 1999Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.CVE-1999-0882 · Other software · Falcon · reported by MITREMedium 5

    Falcon web server allows remote attackers to determine the absolute path of the web root via long file names.

    Product
    Falcon Web Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 15, 1999Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.CVE-1999-0943 · Other software · Openlink · reported by MITREHigh 10

    Buffer overflow in OpenLink 3.2 allows remote attackers to gain privileges via a long GET request to the web configurator.

    Product
    Openlink
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 13, 1999HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of .CVE-1999-1343 · Other software · Xerox · reported by MITREMedium 5

    HTTP server for Xerox DocuColor 4 LP allows remote attackers to cause a denial of service (hang) via a long URL that contains a large number of . characters.

    Product
    Docucolor 4lp
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 4, 1999Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET reCVE-1999-1523 · Other software · Sambar · reported by MITREHigh 7.5

    Buffer overflow in Sambar Web Server 4.2.1 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP GET request.

    Product
    Sambar Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 1, 1999Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.CVE-2000-0047 · Other software · Yahoo · reported by MITREMedium 5

    Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.

    Product
    Pager
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Oct 1, 1999Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.CVE-2000-0016 · Other software · True North · reported by MITREMedium 5

    Buffer overflow in Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service or execute commands via a long username.

    Product
    Internet Anywhere Mail Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 30, 1999Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) CVE-1999-1469 · Other software · Hughes Technologies · reported by MITREHigh 7.5

    Buffer overflow in w3-auth CGI program in miniSQL package allows remote attackers to execute arbitrary commands via an HTTP request with (1) a long URL, or (2) a long User-Agent MIME header.

    Product
    W3-auth
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 30, 1999Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.CVE-1999-1583 · Other software · IBM · reported by MITREHigh 7.2

    Buffer overflow in nslookup for AIX 4.3 allows local users to execute arbitrary code via a long hostname command line argument.

    Product
    AIX
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 1999Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.CVE-1999-1477 · Other software · Gnome · reported by MITREHigh 7.2

    Buffer overflow in GNOME libraries 1.0.8 allows local user to gain root access via a long --espeaker argument in programs such as nethack.

    Product
    Gnome Libs
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 23, 1999Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variaCVE-1999-1534 · Other software · Knox Software · reported by MITREHigh 7.2

    Buffer overflow in (1) nlservd and (2) rnavc in Knox Software Arkeia backup product allows local users to obtain root access via a long HOME environmental variable.

    Product
    Arkeia
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 21, 1999Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.CVE-1999-0708 · Other software · Infodrom · reported by MITREHigh 7.2

    Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field.

    Product
    Cfingerd
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 1999Buffer overflow in FuseMAIL POP service via long USER and PASS commands.CVE-1999-0759 · Other software · Fuseware · reported by MITREHigh 10

    Buffer overflow in FuseMAIL POP service via long USER and PASS commands.

    Product
    Fusemail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 1999Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.CVE-1999-1014 · Other software · SUN · reported by MITREMedium 4.6

    Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.

    Product
    Solaris
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 13, 1999Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.CVE-1999-0691 · Other software · CDE · reported by MITREHigh 7.2

    Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.

    Product
    CDE
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 31, 1999Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.CVE-1999-0774 · Other software · Martin Stover · reported by MITREHigh 7.2

    Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.

    Product
    Mars NWE
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 26, 1999Denial of service in Debian IRC Epic/epic4 client via a long string.CVE-1999-0939 · Other software · Debian · reported by MITREMedium 5

    Denial of service in Debian IRC Epic/epic4 client via a long string.

    Product
    Debian Linux
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 25, 1999Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.CVE-1999-0872 · Other software · Paul Vixie · reported by MITREHigh 7.2

    Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.

    Product
    Vixie Cron
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 23, 1999The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.CVE-1999-0720 · Computers, phones & browsers · Linux · reported by MITREMedium 4.6

    The pt_chown command in Linux allows local users to modify TTY terminal devices that belong to other users.

    Product
    Linux Kernel
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 29, 1999Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large CVE-1999-0770 · Other software · Checkpoint · reported by MITRELow 2.1

    Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.

    Product
    Firewall-1
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 23, 1999Denial of service in Windows NT messenger service through a long username.CVE-1999-0224 · Computers, phones & browsers · Microsoft · reported by MITREMedium 5

    Denial of service in Windows NT messenger service through a long username.

    Product
    Windows NT
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 26, 1999Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.CVE-1999-0733 · Other software · VMware · reported by MITREHigh 7.2

    Buffer overflow in VMWare 1.0.1 for Linux via a long HOME environmental variable.

    Product
    Workstation
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 25, 1999Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.CVE-1999-0778 · Other software · XI Graphics · reported by MITREHigh 7.2

    Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.

    Product
    Accelerated-x Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 1, 1999Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.CVE-2000-0481 · Other software · KDE · reported by MITREMedium 5

    Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.

    Product
    K-mail
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jun 1, 1999Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.CVE-1999-0772 · Other software · Compaq · reported by MITREMedium 6.4

    Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

    Product
    Insight Management Agent
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 23, 1999Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.CVE-1999-0928 · Other software · Smartdesk · reported by MITREMedium 5

    Buffer overflow in SmartDesk WebSuite allows remote attackers to cause a denial of service via a long URL.

    Product
    Websuite
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 19, 1999counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.CVE-1999-1031 · Other software · Behold Software · reported by MITREMedium 5

    counter.exe 2.70 allows a remote attacker to cause a denial of service (hang) via a long argument.

    Product
    Web Page Counter
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 17, 1999Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1)CVE-1999-1510 · Other software · Bisonware · reported by MITREHigh 7.5

    Buffer overflows in Bisonware FTP server prior to 4.1 allow remote attackers to cause a denial of service, and possibly execute arbitrary commands, via long (1) USER, (2) LIST, or (3) CWD commands.

    Product
    Bisonware FTP Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 7, 1999Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.CVE-1999-0686 · Other software · Netscape · reported by MITREMedium 5

    Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.

    Product
    Enterprise Server
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • May 4, 1999SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.CVE-1999-1012 · Other software · Lotus · reported by MITREMedium 5

    SMTP component of Lotus Domino 4.6.1 on AS/400, and possibly other operating systems, allows a remote attacker to crash the mail server via a long string.

    Product
    Domino
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.