UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
38,107
Published in 7 days
651
Critical in 30 days
387
Actively exploited
420

Latest vulnerabilities

38,107 vulnerabilities
  1. Medium 6.1

    CVE-2024-34071 · Umbraco CMS

    Open Redirect Bypass Protection

    Published 21 May 2024 · Fixed in 10.8.6, 12.3.10, 13.3.1 · NVD, Project advisories (GitHub)
  2. Medium 5.4

    CVE-2024-4619 · Elementor

    Elementor Website Builder – more than just a page builder: Cross-site Scripting

    Published 20 May 2024 · Fixed in 3.21.5, 3.22.0-beta2 · NVD, WPVulnerability
  3. High 7.1

    CVE-2024-4566 · Woolentor Addons (WordPress plugin)

    ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: Missing Authorization

    Published 20 May 2024 · Fixed in 2.8.9 · WPVulnerability
  4. Medium 5.4

    CVE-2024-3345 · Woolentor Addons (WordPress plugin)

    ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: Cross-site Scripting

    Published 20 May 2024 · Fixed in 2.8.9 · WPVulnerability
  5. High 8.8

    CVE-2024-22120 · Zabbix

    Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.

    Published 17 May 2024 · Fixed in 6.0.28, 6.4.13 · NVD
  6. Medium 5.4

    CVE-2024-34767 · Woolentor Addons (WordPress plugin)

    ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin: Cross-site Scripting

    Published 17 May 2024 · Fixed in 2.8.8 · WPVulnerability
  7. High 7.5

    CVE-2024-31142 · Xen

    Because of a logical error in XSA-407 (Branch Type Confusion), the mitigation is not applied properly when it is intended to be used. XSA-434 (Speculative Return Stack Overflow) uses the same infrastructure, so is equally impacted. For more details, see: https://xenbits.xen.org/xsa/advisory-407.html https://xenbits.xen.org/xsa/advisory-434.html

    Published 16 May 2024 · Fixed in 4.16.6, 4.17.4, 4.18.2 · NVD
  8. Medium 6.5

    CVE-2023-46842 · Xen

    Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a considerable amount of time, the hypervisor may choose to invoke a hypercall continuation. Doing so…

    Published 16 May 2024 · NVD
  9. Critical 9.1

    CVE-2024-35187 · Stalwart

    Privilege escalation by design

    Published 16 May 2024 · Fixed in 0.8.0 · Project advisories (GitHub)
  10. Medium 6.1

    CVE-2024-35302 · TeamCity

    In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible

    Published 16 May 2024 · Fixed in 2023.11 · NVD
  11. Medium 5.5

    CVE-2024-35301 · TeamCity

    In JetBrains TeamCity before 2024.03.1 commit status publisher didn't check project scope of the GitHub App token

    Published 16 May 2024 · Fixed in 2024.03.1 · NVD
  12. Medium 6.1

    CVE-2024-35300 · TeamCity

    In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible

    Published 16 May 2024 · NVD
  13. Medium 5.4

    CVE-2024-4263 · MLflow

    A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the…

    Published 16 May 2024 · Fixed in 2.12.1 · NVD
  14. High 7.5

    CVE-2024-3848 · MLflow

    A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the…

    Published 16 May 2024 · Fixed in 2.12.1 · NVD
  15. Critical 9.9

    CVE-2024-34082 · Grav

    Grav is a file-based Web platform. Prior to version 1.7.46, a low privilege user account with page edit privilege can read any server files using Twig Syntax. This includes Grav user account files - `/grav/user/accounts/*.yaml`. This file stores hashed user password, 2FA secret, and the password reset token. This can allow an adversary to compromise any registered account and read any file in…

    Published 15 May 2024 · Fixed in 1.7.46 · NVD
  16. Medium 6.8

    CVE-2024-35179 · Stalwart

    Unprivileged user can read files as root

    Published 15 May 2024 · Fixed in 0.8.0 · Project advisories (GitHub)
  17. Medium 6.4

    CVE-2024-4617 · SEO By Rank Math (WordPress plugin)

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: Cross-site Scripting

    Published 15 May 2024 · Fixed in 1.0.219 · WPVulnerability
  18. Critical 9.9

    CVE-2024-34762 · Advanced Custom Fields Pro (WordPress plugin)

    Advanced Custom Field Pro: Path Traversal

    Published 15 May 2024 · Fixed in 6.2.10 · WPVulnerability
  19. High 8.5

    CVE-2024-34761 · Advanced Custom Fields Pro (WordPress plugin)

    Advanced Custom Field Pro: Code Injection

    Published 15 May 2024 · Fixed in 6.2.10 · WPVulnerability
  20. Medium 6.5

    CVE-2024-31483 · HPE ArubaOS

    An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  21. High 7.5

    CVE-2024-31482 · HPE ArubaOS

    An unauthenticated Denial-of-Service (DoS) vulnerability exists in the ANSI escape code service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected Access Point.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  22. High 7.5

    CVE-2024-31481 · HPE ArubaOS

    Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  23. High 7.5

    CVE-2024-31480 · HPE ArubaOS

    Unauthenticated Denial of Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  24. High 7.5

    CVE-2024-31479 · HPE ArubaOS

    Unauthenticated Denial of Service (DoS) vulnerabilities exist in the Central Communications service accessed via the PAPI protocol. Successful exploitation of these vulnerabilities result in the ability to interrupt the normal operation of the affected service.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  25. High 7.5

    CVE-2024-31478 · HPE ArubaOS

    Multiple unauthenticated Denial-of-Service (DoS) vulnerabilities exists in the Soft AP daemon accessed via the PAPI protocol. Successful exploitation of these vulnerabilites result in the ability to interrupt the normal operation of the affected Access Point.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  26. High 8.8

    CVE-2024-31477 · HPE ArubaOS

    Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  27. High 8.8

    CVE-2024-31476 · HPE ArubaOS

    Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities result in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  28. High 8.2

    CVE-2024-31475 · HPE ArubaOS

    There is an arbitrary file deletion vulnerability in the Central Communications service accessed by PAPI (Aruba's access point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  29. High 8.2

    CVE-2024-31474 · HPE ArubaOS

    There is an arbitrary file deletion vulnerability in the CLI service accessed by PAPI (Aruba's Access Point management protocol). Successful exploitation of this vulnerability results in the ability to delete arbitrary files on the underlying operating system, which could lead to the ability to interrupt normal operation and impact the integrity of the affected Access Point

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  30. Critical 9.8

    CVE-2024-31473 · HPE ArubaOS

    There is a command injection vulnerability in the underlying deauthentication service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  31. Critical 9.8

    CVE-2024-31472 · HPE ArubaOS

    There are command injection vulnerabilities in the underlying Soft AP Daemon service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  32. Critical 9.8

    CVE-2024-31471 · HPE ArubaOS

    There is a command injection vulnerability in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  33. Critical 9.8

    CVE-2024-31470 · HPE ArubaOS

    There is a buffer overflow vulnerability in the underlying SAE (Simultaneous Authentication of Equals) service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  34. Critical 9.8

    CVE-2024-31469 · HPE ArubaOS

    There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  35. Critical 9.8

    CVE-2024-31468 · HPE ArubaOS

    There are buffer overflow vulnerabilities in the underlying Central Communications service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the…

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  36. Critical 9.8

    CVE-2024-31467 · HPE ArubaOS

    There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  37. Critical 9.8

    CVE-2024-31466 · HPE ArubaOS

    There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending specially crafted packets destined to the PAPI (Aruba's Access Point management protocol) UDP port (8211). Successful exploitation of these vulnerabilities result in the ability to execute arbitrary code as a privileged user on the underlying operating system.

    Published 14 May 2024 · Fixed in 10.4.1.1, 10.5.1.1 · NVD
  38. High 8.8

    CVE-2024-31491 · Fortinet FortiSandbox

    A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.

    Published 14 May 2024 · Fixed in 4.2.7, 4.4.5 · NVD
  39. Medium 5.9

    CVE-2024-30046 · .NET

    Visual Studio Denial of Service Vulnerability

    Published 14 May 2024 · Fixed in 7.0.19, 8.0.5 · NVD
  40. Medium 6.3

    CVE-2024-30045 · .NET

    .NET and Visual Studio Remote Code Execution Vulnerability

    Published 14 May 2024 · Fixed in 7.0.19, 8.0.5 · NVD
  41. High 7.5

    CVE-2024-26007 · Fortinet FortiOS

    An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.

    Published 14 May 2024 · NVD
  42. High 7.2

    CVE-2023-46714 · Fortinet FortiOS

    A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.1 through 7.2.6 and version 7.4.0 through 7.4.1 allows a privileged attacker over the administrative interface to execute arbitrary code or commands via crafted HTTP or HTTPs requests.

    Published 14 May 2024 · NVD
  43. Medium 5.0

    CVE-2023-45586 · Fortinet FortiProxy, Fortinet FortiOS

    An insufficient verification of data authenticity vulnerability [CWE-345] in Fortinet FortiOS SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.12 & FortiProxy SSL-VPN tunnel mode version 7.4.0 through 7.4.1, version 7.2.0 through 7.2.7 and before 7.0.13 allows an authenticated VPN user to send (but not receive) packets spoofing the IP of another user…

    Published 14 May 2024 · Fixed in 7.0.13, 7.0.14, 7.2.8 · NVD
  44. High 7.2

    CVE-2023-45583 · Fortinet FortiProxy, Fortinet FortiOS

    A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions,…

    Published 14 May 2024 · Fixed in 7.0.12, 7.2.6 · NVD
  45. High 7.2

    CVE-2023-44247 · Fortinet FortiOS

    A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 6.4 all versions may allow a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

    Published 14 May 2024 · NVD
  46. Medium 6.7

    CVE-2023-36640 · Fortinet FortiProxy, Fortinet FortiOS

    A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0.0 through 6.0.16, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through 7.2.5, FortiProxy 7.0.0 through 7.0.11, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions,…

    Published 14 May 2024 · NVD
  47. Medium 5.3

    CVE-2024-3374 · MongoDB

    An unauthenticated user can trigger a fatal assertion in the server while generating ftdc diagnostic metrics due to attempting to build a BSON object that exceeds certain memory sizes. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.16 and MongoDB Server v6.0 versions prior to and including 6.0.5.

    Published 14 May 2024 · NVD
  48. High 7.5

    CVE-2024-3372 · MongoDB

    Improper validation of certain metadata input may result in the server not correctly serialising BSON. This can be performed pre-authentication and may cause unexpected application behavior including unavailability of serverStatus responses. This issue affects MongoDB Server v7.0 versions prior to 7.0.6, MongoDB Server v6.0 versions prior to 6.0.14 and MongoDB Server v.5.0 versions prior to…

    Published 14 May 2024 · Fixed in 5.0.25, 6.0.14, 7.0.6 · NVD
  49. Medium 5.4

    CVE-2024-32077 · Apache Airflow

    Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are recommended to upgrade to version 2.9.1, which fixes this issue.

    Published 14 May 2024 · NVD
  50. Medium 6.5

    CVE-2024-4597 · GitLab

    An issue has been discovered in GitLab EE affecting all versions from 16.7 before 16.9.7, all versions starting from 16.10 before 16.10.5, all versions starting from 16.11 before 16.11.2. An attacker could force a user with an active SAML session to approve an MR via CSRF.

    Published 14 May 2024 · Fixed in 16.9.7, 16.10.5, 16.11.2 · NVD

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.