Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
8 results
Sep 28, 2022readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.CVE-2022-38934 · Other software · Toaruos · reported by MITRELow 3.3
readelf in ToaruOS 2.0.1 has some arbitrary address read vulnerabilities when parsing a crafted ELF file.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 27, 2022readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.CVE-2022-38932 · Other software · Toaruos · reported by MITREHigh 7.8
readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 8, 2022ToaruOS 1.99.2 is affected by incorrect access control via the kernel.CVE-2021-36710 · Other software · Toaruos · reported by MITREHigh 8.8
ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be mapped in userland. A call gate can then be written to escalate to CPL 0.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2019An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leadiCVE-2019-13049 · Other software · Toaruos Project · reported by MITREHigh 7.8
An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP, leading to escalation of privileges.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2019kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, anCVE-2019-13048 · Other software · Toaruos Project · reported by MITREMedium 5.5
kernel/sys/syscall.c in ToaruOS through 1.10.9 allows a denial of service upon a critical error in certain sys_sbrk allocation patterns (involving PAGE_SIZE, and a value less than PAGE_SIZE).
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2019kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages toCVE-2019-13047 · Other software · Toaruos Project · reported by MITREHigh 7.8
kernel/sys/syscall.c in ToaruOS through 1.10.9 has incorrect access control in sys_sysfunc case 9 for TOARU_SYS_FUNC_SETHEAP, allowing arbitrary kernel pages to be mapped into user land, leading to root access.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 29, 2019linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.CVE-2019-13046 · Other software · Toaruos Project · reported by MITREHigh 7.8
linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 23, 2019apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable.CVE-2019-12937 · Other software · Toaruos Project · reported by MITREHigh 7.8
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable.
- Product
- Toaruos
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.