UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
39,931
Published in 7 days
1,034
Critical in 30 days
361
Actively exploited
423

Latest vulnerabilities

39,931 vulnerabilities
  1. Medium 6.5

    CVE-2017-14223 · FFmpeg

    In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

    Published 9 Sept 2017 · NVD
  2. Medium 6.5

    CVE-2017-14222 · FFmpeg

    In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

    Published 9 Sept 2017 · NVD
  3. High 8.8

    CVE-2015-4724 · Concrete CMS

    SQL injection vulnerability in Concrete5 5.7.3.1.

    Published 7 Sept 2017 · NVD
  4. Medium 6.1

    CVE-2015-4721 · Concrete CMS

    Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.

    Published 7 Sept 2017 · NVD
  5. Critical 9.8

    CVE-2017-9458 · Palo Alto Networks PAN-OS

    XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to obtain sensitive information, cause a denial of service, or conduct server-side request forgery (SSRF) attacks via unspecified vectors.

    Published 7 Sept 2017 · NVD
  6. Medium 6.1

    CVE-2017-12416 · Palo Alto Networks PAN-OS

    Cross-site scripting (XSS) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7.0.17, 7.1.x before 7.1.12, and 8.0.x before 8.0.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper request parameter validation.

    Published 7 Sept 2017 · NVD
  7. Medium 5.9

    CVE-2017-12133 · GNU C Library

    Use-after-free vulnerability in the clntudp_call function in sunrpc/clnt_udp.c in the GNU C Library (aka glibc or libc6) before 2.26 allows remote attackers to have unspecified impact via vectors related to error path.

    Published 7 Sept 2017 · NVD
  8. Medium 6.5

    CVE-2017-14175 · ImageMagick

    In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and columns fields in the header but does not contain sufficient backing data, is provided, the loop over the rows would consume huge CPU resources, since there is no EOF check inside the loop.

    Published 7 Sept 2017 · NVD
  9. Medium 6.5

    CVE-2017-14174 · ImageMagick

    In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "length" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.

    Published 7 Sept 2017 · NVD
  10. Medium 6.5

    CVE-2017-14173 · ImageMagick

    In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smaller value than expected. As a result, an infinite loop would occur for a crafted TXT file that claims a very large "max_value" value.

    Published 7 Sept 2017 · NVD
  11. Medium 6.5

    CVE-2017-14172 · ImageMagick

    In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" field in the header but does not contain sufficient backing data, is provided, the loop over "length" would consume huge CPU resources, since there is no EOF check inside the loop.

    Published 7 Sept 2017 · NVD
  12. Medium 6.5

    CVE-2017-14171 · FFmpeg

    In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF…

    Published 7 Sept 2017 · NVD
  13. Medium 6.5

    CVE-2017-14170 · FFmpeg

    In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but does not contain sufficient backing data, is provided, the loop would consume huge CPU resources, since there is no EOF check inside the loop.…

    Published 7 Sept 2017 · NVD
  14. High 8.8

    CVE-2017-14169 · FFmpeg

    In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xffffffff, is provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value.

    Published 7 Sept 2017 · NVD
  15. Critical 9.8

    CVE-2015-5959 · Froxlor

    Froxlor before 0.9.33.2 with the default configuration/setup might allow remote attackers to obtain the database password by reading /logs/sql-error.log.

    Published 6 Sept 2017 · NVD
  16. High 7.5

    CVE-2014-6438 · Ruby

    The URI.decode_www_form_component method in Ruby before 1.9.2-p330 allows remote attackers to cause a denial of service (catastrophic regular expression backtracking, resource consumption, or application crash) via a crafted string.

    Published 6 Sept 2017 · NVD
  17. Medium 6.5

    CVE-2017-14139 · ImageMagick

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.

    Published 4 Sept 2017 · NVD
  18. Critical 9.8

    CVE-2017-14138 · ImageMagick

    ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as demonstrated by VP8 errors.

    Published 4 Sept 2017 · NVD
  19. High 7.5

    CVE-2017-14137 · ImageMagick

    ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length field in a header.

    Published 4 Sept 2017 · NVD
  20. Medium 6.5

    CVE-2017-12693 · ImageMagick

    The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted BMP file.

    Published 1 Sept 2017 · NVD
  21. Medium 6.5

    CVE-2017-12692 · ImageMagick

    The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted VIFF file.

    Published 1 Sept 2017 · NVD
  22. Medium 6.5

    CVE-2017-12691 · ImageMagick

    The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) via a crafted file.

    Published 1 Sept 2017 · NVD
  23. High 7.2

    CVE-2016-10509 · OpenCart

    SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model/openbay/amazon.php in OpenCart before version 2.3.0.0 allows remote authenticated administrators to execute arbitrary SQL commands via a carrier (aka courier_id) parameter to openbay.php.

    Published 31 Aug 2017 · NVD
  24. Critical 9.8

    CVE-2017-14064 · Ruby

    Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory during a JSON.generate call. The issues lies in using strdup in ext/json/ext/generator/generator.c, which will stop after encountering a '\0' byte, returning a pointer to a string of length zero, which is not the length stored in space_len.

    Published 31 Aug 2017 · NVD
  25. Medium 6.5

    CVE-2017-14060 · ImageMagick

    In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function in coders/cut.c that could allow an attacker to cause a Denial of Service (in the QueueAuthenticPixelCacheNexus function within the MagickCore/cache.c file) by submitting a malformed image file.

    Published 31 Aug 2017 · NVD
  26. Medium 6.5

    CVE-2017-14059 · FFmpeg

    In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

    Published 31 Aug 2017 · NVD
  27. Medium 6.5

    CVE-2017-14058 · FFmpeg

    In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list, which allows remote attackers to cause a denial of service (infinite loop).

    Published 31 Aug 2017 · NVD
  28. Medium 6.5

    CVE-2017-14057 · FFmpeg

    In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but does not contain sufficient backing data, is provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside…

    Published 31 Aug 2017 · NVD
  29. Medium 6.5

    CVE-2017-14056 · FFmpeg

    In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but does not contain sufficient backing data, is provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF…

    Published 31 Aug 2017 · NVD
  30. Medium 6.5

    CVE-2017-14055 · FFmpeg

    In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the…

    Published 31 Aug 2017 · NVD
  31. Medium 6.5

    CVE-2017-14054 · FFmpeg

    In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but does not contain sufficient backing data, is provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop.

    Published 31 Aug 2017 · NVD
  32. Medium 6.1

    CVE-2017-14038 · CrushFTP

    CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.

    Published 30 Aug 2017 · NVD
  33. Medium 6.1

    CVE-2017-14037 · CrushFTP

    CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.

    Published 30 Aug 2017 · NVD
  34. Medium 6.1

    CVE-2017-14036 · CrushFTP

    CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.

    Published 30 Aug 2017 · NVD
  35. Critical 9.8

    CVE-2017-14035 · CrushFTP

    CrushFTP 8.x before 8.2.0 has a serialization vulnerability.

    Published 30 Aug 2017 · NVD
  36. Medium 6.1

    CVE-2016-6800 · Apache OFBiz

    The default configuration of the Apache OFBiz framework offers a blog functionality. Different users are able to operate blogs which are related to specific parties. In the form field for the creation of new blog articles the user input of the summary field as well as the article field is not properly sanitized. It is possible to inject arbitrary JavaScript code in these form fields. This code…

    Published 30 Aug 2017 · NVD
  37. High 8.8

    CVE-2016-4462 · Apache OFBiz

    By manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid Freemarker directives to the Template Engine that are reflected on the webpage; a specially crafted Freemarker template could be used for remote code execution. Mitigation: Upgrade to Apache OFBiz 16.11.01

    Published 30 Aug 2017 · NVD
  38. High 7.5

    CVE-2017-3163 · Apache Solr

    When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and…

    Published 30 Aug 2017 · NVD
  39. Medium 6.5

    CVE-2017-13769 · ImageMagick

    The WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an attacker to cause a denial of service (buffer over-read) by sending a crafted JPEG file.

    Published 30 Aug 2017 · Fixed in 6.9.9-11 · NVD
  40. Medium 6.5

    CVE-2017-13768 · ImageMagick

    Null Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick through 7.0.6-10 allows an attacker to perform denial of service by sending a crafted image file.

    Published 30 Aug 2017 · Fixed in 6.9.9-11 · NVD
  41. Medium 6.5

    CVE-2017-13758 · ImageMagick

    In ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in MagickCore/draw.c.

    Published 29 Aug 2017 · NVD
  42. Medium 6.5

    CVE-2017-12875 · ImageMagick

    The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file.

    Published 29 Aug 2017 · NVD
  43. High 8.8

    CVE-2017-11455 · Ivanti Connect Secure

    diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5, 5.2R1 through 5.2R8, and 5.1R1 through 5.1R10 allow remote attackers to hijack the authentication of administrators for requests to start tcpdump, related to the lack of anti-CSRF tokens.

    Published 29 Aug 2017 · NVD
  44. High 7.5

    CVE-2015-5209 · Apache Struts

    Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.

    Published 29 Aug 2017 · NVD
  45. Medium 5.5

    CVE-2017-13685 · SQLite

    The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.

    Published 29 Aug 2017 · NVD
  46. Medium 5.3

    CVE-2017-3735 · OpenSSL

    While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. This bug has been present since 2006 and is present in all versions of OpenSSL before 1.0.2m and 1.1.0g.

    Published 28 Aug 2017 · NVD
  47. Medium 6.5

    CVE-2017-12877 · ImageMagick

    Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

    Published 28 Aug 2017 · Fixed in 6.9.9-6, 7.0.6-6 · NVD
  48. Medium 6.5

    CVE-2017-12876 · ImageMagick

    Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.

    Published 28 Aug 2017 · Fixed in 7.0.6-6 · NVD
  49. Medium 6.1

    CVE-2014-9469 · vBulletin

    Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.

    Published 28 Aug 2017 · NVD
  50. Critical 9.8

    CVE-2013-0870 · FFmpeg

    The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.

    Published 28 Aug 2017 · NVD

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.