Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
20 results
Apr 14, 2025Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher.CVE-2025-32987 · Other software · Arctera · reported by MITREMedium 6
Arctera eDiscovery Platform before 10.3.2, when Enterprise Vault Collection Module is used, places a cleartext password on a command line in EVSearcher.
- Product
- eDiscovery Platform
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405.CVE-2024-53915 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344.CVE-2024-53914 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343.CVE-2024-53913 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341.CVE-2024-53912 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339.CVE-2024-53911 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336.CVE-2024-53910 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 24, 2024An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334.CVE-2024-53909 · Other software · veritas · reported by MITRECritical 9.8
An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698.CVE-2024-52944 · Other software · veritas · reported by MITREMedium 5.4
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24698. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
- Product
- enterprise_vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697.CVE-2024-52943 · Other software · Veritas · reported by MITREMedium 5.4
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24697. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696.CVE-2024-52942 · Other software · Veritas · reported by MITREMedium 5.4
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24696. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 18, 2024An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695.CVE-2024-52941 · Other software · reported by MITREMedium 5.4
An issue was discovered in Veritas Enterprise Vault before 15.1 UPD882911, ZDI-CAN-24695. It allows an authenticated remote attacker to inject a parameter into an HTTP request, allowing for Cross-Site Scripting (XSS) while viewing archived content. This could reflect back to an authenticated user without sanitization if executed by that user.
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 6, 2021An issue (6 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44682 · Other software · Veritas · reported by MITRECritical 9.8
An issue (6 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14079).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Dec 6, 2021An issue (5 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44681 · Other software · Veritas · reported by MITRECritical 9.8
An issue (5 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14080).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Dec 6, 2021An issue (4 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44680 · Other software · Veritas · reported by MITRECritical 9.8
An issue (4 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14075).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Dec 6, 2021An issue (3 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44679 · Other software · Veritas · reported by MITRECritical 9.8
An issue (3 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14074).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Dec 6, 2021An issue (2 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44678 · Other software · Veritas · reported by MITRECritical 9.8
An issue (2 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14076).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Dec 6, 2021An issue (1 of 6) was discovered in Veritas Enterprise Vault through 14.1.2.CVE-2021-44677 · Other software · Veritas · reported by MITRECritical 9.8
An issue (1 of 6) was discovered in Veritas Enterprise Vault through 14.1.2. On start-up, the Enterprise Vault application starts several services that listen on random .NET Remoting TCP ports for possible commands from client applications. These TCP services can be exploited due to deserialization behavior that is inherent to the .NET Remoting service. A malicious attacker can exploit both TCP remoting services and local IPC services on the Enterprise Vault Server. This vulnerability is mitigated by properly configuring the servers and firewall as described in the vendor's security alert for this vulnerability (VTS21-003, ZDI-CAN-14078).
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comzerodayinitiative.com
Jan 5, 2021An issue was discovered in Veritas Enterprise Vault through 14.0.CVE-2020-36164 · Other software · Veritas · reported by MITRECritical 9.3
An issue was discovered in Veritas Enterprise Vault through 14.0. On start-up, it loads the OpenSSL library. The OpenSSL library then attempts to load the openssl.cnf configuration file (which does not exist) at the following locations in both the System drive (typically C:\) and the product's installation drive (typically not C:\): \Isode\etc\ssl\openssl.cnf (on SMTP Server) or \user\ssl\openssl.cnf (on other affected components). By default, on Windows systems, users can create directories under C:\. A low privileged user can create a openssl.cnf configuration file to load a malicious OpenSSL engine, resulting in arbitrary code execution as SYSTEM when the service starts. This gives the attacker administrator access on the system, allowing the attacker (by default) to access all data, access all installed applications, etc. This vulnerability only affects a server with MTP Server, SMTP Archiving IMAP Server, IMAP Archiving, Vault Cloud Adapter, NetApp File server, or File System Archiving for NetApp as File Server.
- Product
- Enterprise Vault
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordveritas.comveritas.com
Mar 26, 2013Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File SysCVE-2013-1609 · Other software · Symantec · reported by secure@symantec.comHigh 7.8
Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program.
- Product
- Enterprise Vault For File System Archiving
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comsymantec.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.