Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
23 results
Apr 16, 2024Citadela Listing: Exposure of Sensitive Information to an Unauthorized ActorCVE-2024-32086 · WordPress plugins & themes · reported by PatchstackHigh 7.5
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5.18.1.
- Product
- Citadela Listing
- Affected
- up to 5.18.1
- What to do
- Affects up to 5.18.1. Update Citadela Listing to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Apr 15, 2024Citadela Listing: Cross-Site Request Forgery (CSRF)CVE-2024-32085 · WordPress plugins & themes · reported by PatchstackMedium 5.4
Cross-Site Request Forgery (CSRF) vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a before 5.20.0.
- Product
- Citadela Listing
- Fixed in
- 5.20.0
- What to do
- Update Citadela Listing to 5.20.0 or newer.
Full record and what to do →NVD recordpatchstack.compatchstack.com
Oct 4, 2023A cross-site scripting vulnerability exists in Citadel versions prior to 994.CVE-2023-44272 · Other software · Citadel · reported by vultures@jpcert.or.jpMedium 5.4
A cross-site scripting vulnerability exists in Citadel versions prior to 994. When a malicious user sends an instant message with some JavaScript code, the script may be executed on the web browser of the victim user.
- Product
- Citadel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode.citadel.orgcode.citadel.org
May 29, 2023An issue was discovered in Citadel through webcit-932.CVE-2021-37845 · Other software · Citadel · reported by MITRELow 3.7
An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTTLS command (a violation of "The STARTTLS command is only valid in non-authenticated state." in RFC2595). This potentially allows an attacker to cause a victim's e-mail messages to be stored into an attacker's IMAP mailbox, but depends on details of the victim's client behavior.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orgnostarttls.secvuln.info
May 29, 2023An issue was discovered in Citadel through webcit-926.CVE-2020-29547 · Other software · Citadel · reported by MITREMedium 5.9
An issue was discovered in Citadel through webcit-926. Meddler-in-the-middle attackers can pipeline commands after POP3 STLS, IMAP STARTTLS, or SMTP STARTTLS commands, injecting cleartext commands into an encrypted user session. This can lead to credential disclosure.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orguncensored.citadel.org
Aug 2, 2022The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.CVE-2022-1293 · Other software · Thales · reported by psirt@thalesgroup.comMedium 5.7
The embedded neutralization of Script-Related HTML Tag, was by-passed in the case of some extra conditions.
- Product
- Citadel Web Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2021In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check.CVE-2021-0456 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174769927
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Mar 10, 2021In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check.CVE-2021-0455 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175116439
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Mar 10, 2021In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check.CVE-2021-0454 · Computers, phones & browsers · Google · reported by security@android.comMedium 6.7
In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117047
- Product
- Android
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsource.android.comsource.android.com
Oct 28, 2020An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_CVE-2020-27742 · Other software · Citadel · reported by MITREMedium 6.5
An Insecure Direct Object Reference vulnerability in Citadel WebCit through 926 allows authenticated remote attackers to read someone else's emails via the msg_confirm_move template. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orgcitadel.org
Oct 28, 2020Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pagCVE-2020-27741 · Other software · Citadel · reported by MITREMedium 6.1
Multiple cross-site scripting (XSS) vulnerabilities in Citadel WebCit through 926 allow remote attackers to inject arbitrary web script or HTML via multiple pages and parameters. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orgcitadel.org
Oct 28, 2020Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform.CVE-2020-27740 · Other software · Citadel · reported by MITREMedium 5.3
Citadel WebCit through 926 allows unauthenticated remote attackers to enumerate valid users within the platform. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orgcitadel.org
Oct 28, 2020A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions.CVE-2020-27739 · Other software · Citadel · reported by MITRECritical 9.8
A Weak Session Management vulnerability in Citadel WebCit through 926 allows unauthenticated remote attackers to hijack recently logged-in users' sessions. NOTE: this was reported to the vendor in a publicly archived "Multiple Security Vulnerabilities in WebCit 926" thread.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorduncensored.citadel.orgcitadel.org
Jun 20, 2011modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denialCVE-2011-1756 · Other software · Citadel · reported by Red HatMedium 5
modules/xmpp/serv_xmpp.c in Citadel 7.86 and earlier does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
- Product
- Citadel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcode.citadel.orgcode.citadel.org
Mar 26, 2009Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrCVE-2009-0364 · Other software · Citadel · reported by MITREHigh 7.5
Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 4, 2008migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.CVE-2008-3930 · Other software · Debian · reported by MITREMedium 6.9
migrate_aliases.sh in Citadel Server 7.37 allows local users to overwrite arbitrary files via a symlink attack on a temporary file.
- Product
- Citadel Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.debian.orgdev.gentoo.org
Jan 23, 2008Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handCVE-2008-0394 · Other software · Citadel · reported by MITREHigh 7.5
Buffer overflow in Citadel SMTP server 7.10 and earlier allows remote attackers to execute arbitrary code via a long RCPT TO command, which is not properly handled by the makeuserkey function. NOTE: some of these details were obtained from third party information.
- Product
- Smtp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecunia.commilw0rm.com
Jul 16, 2007Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameteCVE-2007-3822 · Other software · Citadel · reported by MITRELow 2.6
Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary web script or HTML via (1) the who parameter to showuser; and other vectors involving (2) calendar mode, (3) bulletin board mode, (4) room names, and (5) uploaded file names.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 16, 2007Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary usCVE-2007-3821 · Other software · Citadel · reported by MITREHigh 7.5
Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations and perform other actions as arbitrary users via unspecified vectors.
- Product
- Webcit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 10, 2005Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifierCVE-2004-1192 · Other software · Citadel · reported by MITREHigh 10
Format string vulnerability in the lprintf function in Citadel/UX 6.27 and earlier allows remote attackers to execute arbitrary code via format string specifiers sent to the server.
- Product
- UX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 30, 2004Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.CVE-2004-1705 · Other software · Citadel · reported by MITREMedium 5
Buffer overflow in Citadel/UX 6.23 and earlier allows remote attackers to cause a denial of service via a long username.
- Product
- UX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 12, 2004Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and CVE-2004-1933 · Other software · reported by MITRELow 2.1
Citadel/UX 5.00 through 6.14 installs the database directory and files with world-read permissions, which could allow local users to bypass access controls and read unauthorized messages.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarc.infosecurityfocus.com
Jul 26, 2002Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possiCVE-2002-0432 · Other software · Citadel · reported by MITREHigh 10
Buffer overflow in (1) lprintf and (2) cprintf in sysdep.c of Citadel/UX 5.90 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attacks such as a long HELO command to the SMTP server.
- Product
- UX
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordonline.securityfocus.comuncensored.citadel.org
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.