Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
12 results
Mar 24, 2026Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in yoyofr modizer (libs/libopenmpt/openmpt-trunk/include/premake/contrib/cCVE-2026-4734 · Other software · yoyofr · reported by cve_disclosure@tech.gov.sgCritical 9.4
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in yoyofr modizer (libs/libopenmpt/openmpt-trunk/include/premake/contrib/curl/lib modules). This vulnerability is associated with program files imap.C. This issue affects modizer: before v4.3.
- Product
- modizer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 3, 2019In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodpCVE-2019-17113 · Other software · Openmpt · reported by MITRECritical 9.8
In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API, leading to a buffer overflow.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.opensuse.org
Jul 30, 2019J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.CVE-2019-14383 · Other software · Openmpt · reported by MITREMedium 6.5
J2B in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.opensuse.org
Jul 30, 2019DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.CVE-2019-14382 · Other software · Openmpt · reported by MITREMedium 6.5
DSM in libopenmpt before 0.4.2 allows an assertion failure during file parsing with debug STLs.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.opensuse.org
Jul 30, 2019libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.CVE-2019-14380 · Other software · Openmpt · reported by MITREMedium 6.5
libopenmpt before 0.4.5 allows a crash during playback due to an out-of-bounds read in XM and MT2 files.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlib.openmpt.orgdebian.org
Jul 30, 2019libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.CVE-2018-20861 · Other software · Openmpt · reported by MITREMedium 6.5
libopenmpt before 0.3.11 allows a crash with certain malformed custom tunings in MPTM files.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.opensuse.org
Jul 30, 2019libopenmpt before 0.3.13 allows a crash with malformed MED files.CVE-2018-20860 · Other software · Openmpt · reported by MITREMedium 6.5
libopenmpt before 0.3.13 allows a crash with malformed MED files.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlists.opensuse.orglists.opensuse.org
Jul 30, 2019libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot.CVE-2019-14381 · Other software · Openmpt · reported by MITREHigh 7.5
libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument to an empty instrument note map slot.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlib.openmpt.orglib.openmpt.org
Jun 4, 2018soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impactCVE-2018-11710 · Other software · Openmpt · reported by MITREHigh 8.8
soundlib/pattern.h in libopenmpt before 0.3.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted AMS file because of an invalid write near address 0 in an out-of-memory situation.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordlib.openmpt.orgsource.openmpt.org
Apr 11, 2018soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an ITCVE-2018-10017 · Other software · Openmpt · reported by MITREMedium 6.5
soundlib/Snd_fx.cpp in OpenMPT before 1.27.07.00 and libopenmpt before 0.3.8 allows remote attackers to cause a denial of service (out-of-bounds read) via an IT or MO3 file with many nested pattern loops.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlib.openmpt.org
Feb 4, 2018soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.CVE-2018-6611 · Other software · Openmpt · reported by MITREHigh 8.8
soundlib/Load_stp.cpp in OpenMPT through 1.27.04.00, and libopenmpt before 0.3.6, has an out-of-bounds read via a malformed STP file.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comlib.openmpt.org
Jul 17, 2017soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execuCVE-2017-11311 · Other software · Openmpt · reported by MITREHigh 7.8
soundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a heap buffer overflow with the potential for arbitrary code execution via a crafted PSM File that triggers use of the same sample slot for two samples.
- Product
- Libopenmpt
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.debian.orglib.openmpt.org
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.