Updated 3 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list

34added in the last 30 days

344new WordPress flaws this week

390,080entries in the database

30 results

Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44510 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44509 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44508 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44507 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of parameter validation in calls to memcpy in str_tok in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44506 · Other software · Yottadb · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44505 · Other software · Yottadb · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44504 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a size variable, stored as an signed int, to equal an extremely large value, which is interpreted as a negative value during a check. This value is then used in a memcpy call on the stack, causing a memory segmentation fault.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44503 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to va_arg on an empty variadic parameter list, most likely causing a memory segmentation fault.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44502 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size of a memset that occurs in calls to util_format in sr_unix/util_output.c.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44501 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44500 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44499 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44498 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44497 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, can cause the bounds of a for loop to be miscalculated, which leads to a use after free condition a pointer is pushed into previously free memory by the loop.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base).CVE-2021-44496 · Other software · Fisglobal · reported by MITRECritical 9.8
An issue was discovered in FIS GT.M through V7.0-000 (related to the YottaDB code base). Using crafted input, an attacker can control the size variable and buffer that is passed to a call to memcpy. An attacker can use this to overwrite key data structures and gain control of the flow of execution.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.CVE-2021-44495 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a NULL pointer dereference after calls to ZPrint.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.CVE-2021-44494 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause calls to ZRead to crash due to a NULL pointer dereference.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.CVE-2021-44493 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, an attacker can cause a call to $Extract to force an signed integer holding the size of a buffer to take on a large negative number, which is then used as the length of a memcpy call that occurs on the stack, causing a buffer overflow.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000.CVE-2021-44492 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function f_incr in sr_port/f_incr.c and cause a crash due to a NULL pointer dereference.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record tinco.pair.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44491 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a digs-- calculation.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44490 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause a calculation of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c to result in an extremely large value in order to cause a segmentation fault and crash the application. This is a "- (digs < 1 ? 1 : digs)" subtraction.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44489 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in op_fnj3 in sr_port/op_fnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44488 · Other software · Fisglobal · reported by MITRECritical 9.1
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can control the size and input to calls to memcpy in op_fnfnumber in sr_port/op_fnfnumber.c in order to corrupt memory or crash the application.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44487 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to ious_open in sr_unix/ious_open.c allows attackers to crash the application by dereferencing a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44486 · Other software · Fisglobal · reported by MITRECritical 9.8
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in op_write in sr_port/op_write.c in order to gain control of the flow of execution.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44485 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in trip_gen in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44484 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of NULL checks in calls to emit_trip in sr_port/emit_code.c allows attackers to crash the application by dereferencing a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44483 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to eb_div in sr_port/eb_muldiv.c allows attackers to crash the application by performing a divide by zero.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44482 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of input validation in calls to do_verify in sr_unix/do_verify.c allows attackers to attempt to jump to a NULL pointer by corrupting a function pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com
Apr 15, 2022An issue was discovered in YottaDB through r1.32 and V7.0-000.CVE-2021-44481 · Other software · Fisglobal · reported by MITREHigh 7.5
An issue was discovered in YottaDB through r1.32 and V7.0-000. A lack of parameter validation in calls to memcpy in check_and_set_timeout in sr_unix/ztimeoutroutines.c allows attackers to attempt to read from a NULL pointer.
Product
Gt.m
What to do
Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD record gitlab.com gitlab.com

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Vulnerability database

The flaws that hit local websites, every Friday.

Tell us what you're building.