UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
39,146
Published in 7 days
678
Critical in 30 days
355
Actively exploited
421

Latest vulnerabilities

39,146 vulnerabilities
  1. Critical 9.1

    CVE-2020-17142 · Microsoft Exchange Server

    Microsoft Exchange Remote Code Execution Vulnerability

    Published 10 Dec 2020 · NVD
  2. High 8.4

    CVE-2020-17141 · Microsoft Exchange Server

    Microsoft Exchange Remote Code Execution Vulnerability

    Published 10 Dec 2020 · NVD
  3. Critical 9.1

    CVE-2020-17132 · Microsoft Exchange Server

    Microsoft Exchange Remote Code Execution Vulnerability

    Published 10 Dec 2020 · NVD
  4. Medium 6.6

    CVE-2020-17117 · Microsoft Exchange Server

    Microsoft Exchange Remote Code Execution Vulnerability

    Published 10 Dec 2020 · NVD
  5. Medium 6.1

    CVE-2020-25627 · Moodle

    The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.

    Published 9 Dec 2020 · Fixed in 3.9.2 · NVD
  6. Low 3.3

    CVE-2020-27758 · ImageMagick

    A flaw was found in ImageMagick in coders/txt.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick…

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  7. Low 3.3

    CVE-2020-27757 · ImageMagick

    A floating point math calculation in ScaleAnyToQuantum() of /MagickCore/quantum-private.h could lead to undefined behavior in the form of a value outside the range of type unsigned long long. The flaw could be triggered by a crafted input file under certain conditions when it is processed by ImageMagick. Red Hat Product Security marked this as Low because although it could potentially lead to an…

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  8. Medium 5.5

    CVE-2020-27756 · ImageMagick

    In ParseMetaGeometry() of MagickCore/geometry.c, image height and width calculations can lead to divide-by-zero conditions which also lead to undefined behavior. This flaw can be triggered by a crafted input file processed by ImageMagick and could impact application availability. The patch uses multiplication in addition to the function `PerceptibleReciprocal()` in order to prevent such…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  9. Low 3.3

    CVE-2020-27755 · ImageMagick

    in SetImageExtent() of /MagickCore/image.c, an incorrect image depth size can cause a memory leak because the code which checks for the proper image depth size does not reset the size in the event there is an invalid size. The patch resets the depth to a proper size before throwing an exception. The memory leak can be triggered by a crafted input file that is processed by ImageMagick and could…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  10. Low 3.3

    CVE-2020-27754 · ImageMagick

    In IntensityCompare() of /magick/quantize.c, there are calls to PixelPacketIntensity() which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity() function, which forces the pixel intensities to be within the proper bounds in the event of an overflow. This flaw affects…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.8-69 · NVD
  11. Medium 5.5

    CVE-2020-27753 · ImageMagick

    There are several memory leaks in the MIFF coder in /coders/miff.c due to improper image depth values, which can be triggered by a specially crafted input file. These leaks could potentially lead to an impact to application availability or cause a denial of service. It was originally reported that the issues were in `AcquireMagickMemory()` because that is where LeakSanitizer detected the leaks,…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  12. High 7.1

    CVE-2020-27752 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/quantum-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger a heap buffer overflow. This would most likely lead to an impact to application availability, but could potentially lead to an impact to data integrity as well. This flaw affects ImageMagick versions prior to 7.0.9-0.

    Published 8 Dec 2020 · Fixed in 6.9.11-47, 7.0.9-0 · NVD
  13. Low 3.3

    CVE-2020-27751 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/quantum-export.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long long` as well as a shift exponent that is too large for 64-bit type. This would most likely lead to an impact to application availability, but could potentially cause…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  14. Medium 5.5

    CVE-2020-27750 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/colorspace-private.h and MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` and math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other…

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  15. Medium 5.5

    CVE-2020-25676 · ImageMagick

    In CatromWeights(), MeshInterpolate(), InterpolatePixelChannel(), InterpolatePixelChannels(), and InterpolatePixelInfo(), which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor() function. These calculations produced undefined behavior in the form of out-of-range and integer overflows, as identified by…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  16. Low 3.3

    CVE-2020-25675 · ImageMagick

    In the CropImage() and CropImageToTiles() routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a negative impact to application availability or other problems related to undefined behavior, in cases…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  17. Medium 5.5

    CVE-2020-25674 · ImageMagick

    WriteOnePNGImage() from coders/png.c (the PNG coder) has a for loop with an improper exit condition that can allow an out-of-bounds READ via heap-buffer-overflow. This occurs because it is possible for the colormap to have less than 256 valid values but the loop condition will loop 256 times, attempting to pass invalid colormap data to the event logger. The patch replaces the hardcoded 256 value…

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  18. Medium 5.5

    CVE-2020-25667 · ImageMagick

    TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a crafted input file is provided to ImageMagick. The patch uses a StringInfo type instead of a raw C string to remedy this. This could cause an impact to availability of the application. This flaw affects…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  19. Low 3.3

    CVE-2020-25666 · ImageMagick

    There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. The patch uses casts to `ssize_t` type for these calculations, instead of `int`. This flaw could impact application reliability in the event that ImageMagick processes a crafted input file. This flaw…

    Published 8 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  20. Medium 5.5

    CVE-2020-25665 · ImageMagick

    The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on in the routine. The patch adds 256 to bytes_per_row in the call to AcquireQuantumMemory(). This could cause impact to reliability. This flaw affects ImageMagick versions prior to 7.0.8-68.

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  21. Medium 6.1

    CVE-2020-25664 · ImageMagick

    In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-private.h is called. The patch fixes the calls by adding 256 to rowbytes. An attacker who is able to supply a specially crafted image could affect availability with a low impact to data integrity. This…

    Published 8 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  22. Medium 5.5

    CVE-2020-25663 · ImageMagick

    A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() was called. This could occur if an attacker is able to submit a malicious image file to be processed by ImageMagick and could lead to denial of service. It likely would not lead to anything further…

    Published 8 Dec 2020 · Fixed in 7.0.8-56 · NVD
  23. Medium 5.9

    CVE-2020-1971 · Node.js, OpenSSL, MySQL

    The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may…

    Published 8 Dec 2020 · Fixed in 12.20.1, 14.15.4, 15.5.0 · NVD
  24. Medium 6.1

    CVE-2020-25631 · Moodle

    A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" page. This is fixed in 3.9.2, 3.8.5 and 3.7.8.

    Published 8 Dec 2020 · Fixed in 3.7.8, 3.8.5, 3.9.2 · NVD
  25. High 7.5

    CVE-2020-25630 · Moodle

    A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This affects versions 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.

    Published 8 Dec 2020 · Fixed in 3.7.8, 3.8.5, 3.9.2 · NVD
  26. High 8.8

    CVE-2020-25629 · Moodle

    A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. This is fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.

    Published 8 Dec 2020 · Fixed in 3.7.8, 3.8.5, 3.9.2 · NVD
  27. Medium 6.1

    CVE-2020-25628 · Moodle

    The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. Fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.

    Published 8 Dec 2020 · Fixed in 3.7.8, 3.8.5, 3.9.2 · NVD
  28. Medium 5.5

    CVE-2020-8566 · Kubernetes

    In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects < v1.19.3, < v1.18.10, < v1.17.13.

    Published 7 Dec 2020 · Fixed in 1.17.13, 1.18.10, 1.19.3 · NVD
  29. Medium 5.5

    CVE-2020-8565 · Kubernetes

    In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. This affects <= v1.19.3, <= v1.18.10, <= v1.17.13, < v1.20.0-alpha2.

    Published 7 Dec 2020 · NVD
  30. Medium 5.5

    CVE-2020-8564 · Kubernetes

    In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials. This affects < v1.19.3, < v1.18.10, < v1.17.13.

    Published 7 Dec 2020 · Fixed in 1.17.13, 1.18.10, 1.19.3 · NVD
  31. Medium 5.5

    CVE-2020-8563 · Kubernetes

    In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.3.

    Published 7 Dec 2020 · Fixed in 1.19.3 · NVD
  32. Medium 5.5

    CVE-2020-28935 · Unbound

    NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vulnerability that would allow for a local symlink attack. When writing the PID file, Unbound and NSD create the file if it is not there, or open an existing file for writing. In case the file was already present, they would follow symlinks if the file happened to be a…

    Published 7 Dec 2020 · Fixed in 1.13.0 · NVD
  33. High 7.8

    CVE-2020-29599 · ImageMagick

    ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c.

    Published 7 Dec 2020 · Fixed in 6.9.11-40, 7.0.10-40 · NVD
  34. Medium 6.5

    CVE-2020-13945 · Apache APISIX

    In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.

    Published 7 Dec 2020 · NVD
  35. High 7.5

    CVE-2020-29573 · GNU C Library

    sysdeps/i386/ldbl2mpn.c in the GNU C Library (aka glibc or libc6) before 2.23 on x86 targets has a stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern, as seen when passing a \x00\x04\x00\x00\x00\x00\x00\x00\x00\x04 value to sprintf. NOTE: the issue does not affect glibc by default in 2016 or later (i.e.,…

    Published 6 Dec 2020 · Fixed in 2.23 · NVD
  36. Low 3.3

    CVE-2020-27773 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/gem-private.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned char` or division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior.…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  37. Low 3.3

    CVE-2020-27772 · ImageMagick

    A flaw was found in ImageMagick in coders/bmp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned int`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  38. Low 3.3

    CVE-2020-27776 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned long. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  39. Low 3.3

    CVE-2020-27775 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type unsigned char. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  40. Low 3.3

    CVE-2020-27774 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of a too large shift for 64-bit type `ssize_t`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9-0 · NVD
  41. Low 3.3

    CVE-2020-27771 · ImageMagick

    In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts the return value of GetPixelIndex() to ssize_t type to avoid this bug. This undefined behavior could be triggered when ImageMagick processes a crafted pdf file. Red Hat Product Security marked this as…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  42. Medium 5.5

    CVE-2020-27770 · ImageMagick

    Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered by a crafted input file that is processed by ImageMagick. This flaw affects ImageMagick versions prior to 7.0.8-68.

    Published 4 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD
  43. Low 3.3

    CVE-2020-27767 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of types `float` and `unsigned char`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9.0 · NVD
  44. High 7.8

    CVE-2020-27766 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the range of type `unsigned long`. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects…

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.8-69 · NVD
  45. Low 3.3

    CVE-2020-27765 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.9-0.

    Published 4 Dec 2020 · Fixed in 6.9.10-69, 7.0.9 · NVD
  46. Medium 4.8

    CVE-2020-29562 · GNU C Library

    The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.

    Published 4 Dec 2020 · NVD
  47. Medium 6.5

    CVE-2018-21270 · Node.js

    Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).

    Published 3 Dec 2020 · Fixed in 0.0.6 · NVD
  48. High 7.5

    CVE-2020-17527 · Apache Tomcat

    While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that…

    Published 3 Dec 2020 · NVD
  49. Low 3.3

    CVE-2020-27764 · ImageMagick

    In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security marked this as Low severity because although it could potentially lead to an impact to application availability, no specific…

    Published 3 Dec 2020 · Fixed in 6.9.10-69 · NVD
  50. Low 3.3

    CVE-2020-27763 · ImageMagick

    A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. This would most likely lead to an impact to application availability, but could potentially cause other problems related to undefined behavior. This flaw affects ImageMagick versions prior to 7.0.8-68.

    Published 3 Dec 2020 · Fixed in 6.9.10-68, 7.0.8-68 · NVD

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.