UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
39,928
Published in 7 days
1,033
Critical in 30 days
362
Actively exploited
423

Latest vulnerabilities

39,928 vulnerabilities
  1. High 7.5

    CVE-2018-5513 · F5 BIG-IP

    On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control plane is not impacted by this issue.

    Published 1 Jun 2018 · NVD
  2. Medium 5.3

    CVE-2017-6153 · F5 BIG-IP

    Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the inflate code from PEM module are subjected to a service disruption via a "Zip Bomb" attack.

    Published 1 Jun 2018 · NVD
  3. Medium 5.3

    CVE-2018-11645 · Ghostscript

    psi/zfile.c in Artifex Ghostscript before 9.21rc1 permits the status command even if -dSAFER is used, which might allow remote attackers to determine the existence and size of arbitrary files, a similar issue to CVE-2016-7977.

    Published 1 Jun 2018 · NVD
  4. Medium 6.1

    CVE-2018-10379 · GitLab

    An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5.8, 10.6.x before 10.6.5, and 10.7.x before 10.7.2. The Move Issue feature contained a persistent XSS vulnerability.

    Published 31 May 2018 · Fixed in 10.5.8, 10.6.5, 10.7.2 · NVD
  5. High 8.8

    CVE-2018-11625 · ImageMagick

    In ImageMagick 7.0.7-37 Q16, SetGrayscaleImage in the quantize.c file allows attackers to cause a heap-based buffer over-read via a crafted file.

    Published 31 May 2018 · NVD
  6. High 8.8

    CVE-2018-11624 · ImageMagick

    In ImageMagick 7.0.7-36 Q16, the ReadMATImage function in coders/mat.c allows attackers to cause a use after free via a crafted file.

    Published 31 May 2018 · NVD
  7. Medium 6.1

    CVE-2018-10939 · Zimbra Collaboration

    Zimbra Web Client (ZWC) in Zimbra Collaboration Suite 8.8 before 8.8.8.Patch4 and 8.7 before 8.7.11.Patch4 has Persistent XSS via a contact group.

    Published 30 May 2018 · NVD
  8. High 8.8

    CVE-2015-7610 · Zimbra Collaboration

    Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 Patch 10, 8.7.x before 8.7.11 Patch 2, and 8.8.x before 8.8.8 Patch 1 allows remote attackers to hijack the authentication of unspecified victims by leveraging failure to use a CSRF token.

    Published 30 May 2018 · NVD
  9. High 7.8

    CVE-2016-7076 · sudo

    sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges.

    Published 29 May 2018 · NVD
  10. Medium 4.9

    CVE-2018-11495 · OpenCart

    OpenCart through 3.0.2.0 allows directory traversal in the editDownload function in admin\model\catalog\download.php via admin/index.php?route=catalog/download/edit, related to the download_id. For example, an attacker can download ../../config.php.

    Published 26 May 2018 · NVD
  11. High 8.0

    CVE-2018-11494 · OpenCart

    The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move, xml, remove) that allows attackers to execute arbitrary code if the remove step is skipped, because the attacker can discover a secret temporary directory name (containing 10 random digits) via a directory traversal attack involving language_info['code'].

    Published 26 May 2018 · NVD
  12. Medium 5.3

    CVE-2017-14185 · Fortinet FortiOS

    An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8 and 5.2 all versions allows SSL VPN web portal users to access internal FortiOS configuration information (eg:addresses) via specifically crafted URLs inside the SSL-VPN web portal.

    Published 25 May 2018 · NVD
  13. Medium 5.9

    CVE-2018-11469 · HAProxy

    Incorrect caching of responses to requests including an Authorization header in HAProxy 1.8.0 through 1.8.9 (if cache enabled) allows attackers to achieve information disclosure via an unauthenticated remote request, related to the proto_http.c check_request_for_cacheability function.

    Published 25 May 2018 · NVD
  14. High 8.1

    CVE-2018-1137 · Moodle

    An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.

    Published 25 May 2018 · NVD
  15. Medium 4.3

    CVE-2018-1136 · Moodle

    An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerability, users can move such a block to other pages where they can be viewed by other users.

    Published 25 May 2018 · NVD
  16. Medium 6.5

    CVE-2018-1135 · Moodle

    An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.

    Published 25 May 2018 · NVD
  17. Medium 6.5

    CVE-2018-1134 · Moodle

    An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

    Published 25 May 2018 · NVD
  18. High 8.8

    CVE-2018-1133 · Moodle

    An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

    Published 25 May 2018 · NVD
  19. High 7.8

    CVE-2013-3024 · IBM WebSphere Application Server

    IBM WebSphere Application Server (WAS) 8.5 through 8.5.0.2 on UNIX allows local users to gain privileges by leveraging improper process initialization. IBM X-Force ID: 84362.

    Published 24 May 2018 · NVD
  20. Medium 6.2

    CVE-2017-14187 · Fortinet FortiOS

    A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and 5.2 and below versions allows attacker to execute unauthorized binary program contained on an USB drive plugged into a FortiGate via linking the aforementioned binary program to a command that is allowed to be run by the fnsysctl CLI command.

    Published 24 May 2018 · NVD
  21. Critical 9.1

    CVE-2018-1000301 · curl

    curl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read vulnerability in denial of service that can result in curl can be tricked into reading data beyond the end of a heap based buffer used to store downloaded RTSP content.. This vulnerability appears to have been fixed in curl < 7.20.0 and curl >= 7.60.0.

    Published 24 May 2018 · NVD
  22. Critical 9.8

    CVE-2018-1000300 · curl

    curl version curl 7.54.1 to and including curl 7.59.0 contains a CWE-122: Heap-based Buffer Overflow vulnerability in denial of service and more that can result in curl might overflow a heap based memory buffer when closing down an FTP connection with very long server command replies.. This vulnerability appears to have been fixed in curl < 7.54.1 and curl >= 7.60.0.

    Published 24 May 2018 · NVD
  23. Medium 4.3

    CVE-2017-2598 · Jenkins

    Jenkins before versions 2.44, 2.32.2 uses AES ECB block cipher mode without IV for encrypting secrets which makes Jenkins and the stored secrets vulnerable to unnecessary risks (SECURITY-304).

    Published 23 May 2018 · Fixed in 2.32.2, 2.44 · NVD
  24. Critical 9.8

    CVE-2018-9019 · Dolibarr ERP CRM

    SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categories_list.php, /accountancy/admin/journals_list.php, /admin/dict.php, /admin/mails_templates.php, or /admin/website.php.

    Published 22 May 2018 · Fixed in 7.0.2 · NVD
  25. Medium 6.1

    CVE-2018-10095 · Dolibarr ERP CRM

    Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.

    Published 22 May 2018 · Fixed in 7.0.2 · NVD
  26. Critical 9.8

    CVE-2018-10094 · Dolibarr ERP CRM

    SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.

    Published 22 May 2018 · Fixed in 7.0.2 · NVD
  27. High 8.0

    CVE-2018-10092 · Dolibarr ERP CRM

    The admin panel in Dolibarr before 7.0.2 might allow remote attackers to execute arbitrary commands by leveraging support for updating the antivirus command and parameters used to scan file uploads.

    Published 22 May 2018 · Fixed in 7.0.2 · NVD
  28. Medium 4.3

    CVE-2017-2609 · Jenkins

    jenkins before versions 2.44, 2.32.2 is vulnerable to an information disclosure vulnerability in search suggestions (SECURITY-385). The autocomplete feature on the search box discloses the names of the views in its suggestions, including the ones for which the current user does not have access to.

    Published 22 May 2018 · Fixed in 2.32.2, 2.44 · NVD
  29. Medium 6.1

    CVE-2018-6378 · Joomla!

    In Joomla! Core before 3.8.8, inadequate filtering of file and folder names leads to various XSS attack vectors in the media manager.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  30. Medium 4.7

    CVE-2018-11328 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. Under specific circumstances (a redirect issued with a URI containing a username and password when the Location: header cannot be used), a lack of escaping the user-info component of the URI could result in an XSS vulnerability.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  31. Medium 4.3

    CVE-2018-11327 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to see the names of tags that were either unpublished or published with restricted view permission.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  32. Medium 4.8

    CVE-2018-11326 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a XSS attack.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  33. Critical 9.8

    CVE-2018-11325 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. The web install application would autofill password fields after either a form validation error or navigating to a previous install step, and display the plaintext password for the administrator account at the confirmation screen.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  34. Medium 5.9

    CVE-2018-11324 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. A long running background process, such as remote checks for core or extension updates, could create a race condition where a session that was expected to be destroyed would be recreated.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  35. High 8.8

    CVE-2018-11323 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. Inadequate checks allowed users to modify the access levels of user groups with higher permissions.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  36. High 7.5

    CVE-2018-11322 · Joomla!

    An issue was discovered in Joomla! Core before 3.8.8. Depending on the server configuration, PHAR files might be handled as executable PHP scripts by the webserver.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  37. Medium 6.5

    CVE-2018-11321 · Joomla!

    An issue was discovered in com_fields in Joomla! Core before 3.8.8. Inadequate filtering allows users authorised to create custom fields to manipulate the filtering options and inject an unvalidated option.

    Published 22 May 2018 · Fixed in 3.8.8 · NVD
  38. Medium 5.4

    CVE-2017-2607 · Jenkins

    jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the build is running. Malicious Jenkins users, or users with SCM access, could configure jobs or modify build scripts such that they print…

    Published 21 May 2018 · Fixed in 2.32.2, 2.44 · NVD
  39. Medium 5.5

    CVE-2018-8010 · Apache Solr

    This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also affected in a similar way. The vulnerability can be used as XXE using file/ftp/http protocols in order to read arbitrary local files from the…

    Published 21 May 2018 · NVD
  40. High 7.5

    CVE-2018-4942 · Adobe ColdFusion

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Unsafe XML External Entity Processing vulnerability. Successful exploitation could lead to information disclosure.

    Published 19 May 2018 · NVD
  41. Medium 6.1

    CVE-2018-4941 · Adobe ColdFusion

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure.

    Published 19 May 2018 · NVD
  42. Medium 6.1

    CVE-2018-4940 · Adobe ColdFusion

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Cross-Site Scripting vulnerability. Successful exploitation could lead to information disclosure.

    Published 19 May 2018 · NVD
  43. Critical 9.8Actively exploited

    CVE-2018-4939 · Adobe ColdFusion

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. Successful exploitation could lead to arbitrary code execution.

    Published 19 May 2018 · NVD
  44. High 7.8

    CVE-2018-4938 · Adobe ColdFusion

    Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Insecure Library Loading vulnerability. Successful exploitation could lead to local privilege escalation.

    Published 19 May 2018 · NVD
  45. Medium 6.1

    CVE-2018-4931 · Adobe Experience Manager

    Adobe Experience Manager versions 6.1 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    Published 19 May 2018 · NVD
  46. Medium 6.1

    CVE-2018-4930 · Adobe Experience Manager

    Adobe Experience Manager versions 6.3 and earlier have an exploitable Cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    Published 19 May 2018 · NVD
  47. Medium 6.1

    CVE-2018-4929 · Adobe Experience Manager

    Adobe Experience Manager versions 6.2 and earlier have an exploitable stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    Published 19 May 2018 · NVD
  48. Medium 6.5

    CVE-2018-11251 · ImageMagick

    In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, which allows attackers to cause a denial of service (application crash in SetGrayscaleImage in MagickCore/quantize.c) via a crafted SUN image file.

    Published 18 May 2018 · Fixed in 7.0.7-21 · NVD
  49. Medium 6.5

    CVE-2017-18273 · ImageMagick

    In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which allows attackers to cause a denial of service (CPU exhaustion) via a crafted image file that is mishandled in a GetImageIndexInList call.

    Published 18 May 2018 · NVD
  50. Medium 6.5

    CVE-2017-18272 · ImageMagick

    In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted MNG image file that is mishandled in an MngInfoDiscardObject call.

    Published 18 May 2018 · Fixed in 7.0.7-21 · NVD

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.