Vulnerability database · updated every 15 minutes
New vulnerabilities in the software websites run.
CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.
- Tracked
- 39,932
- Published in 7 days
- 1,035
- Critical in 30 days
- 361
- Actively exploited
- 423
Latest vulnerabilities
39,932 vulnerabilities- Medium 6.5
CVE-2017-7532 · Moodle
In Moodle 3.x, course creators are able to change system default settings for courses.
Published 17 Jul 2017 · NVD - Medium 4.3
CVE-2017-7531 · Moodle
In Moodle 3.3, the course overview block reveals activities in hidden courses.
Published 17 Jul 2017 · NVD - Medium 6.5
CVE-2017-2642 · Moodle
Moodle 3.x has user fullname disclosure on the user preferences page.
Published 17 Jul 2017 · NVD - High 7.5
CVE-2017-9951 · Memcached
The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.
Published 17 Jul 2017 · NVD - Critical 9.8
CVE-2017-11362 · PHP
In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.
Published 17 Jul 2017 · NVD - Medium 6.5
CVE-2017-11360 · ImageMagick
The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge number_pixels value.
Published 17 Jul 2017 · NVD - Medium 6.5
CVE-2017-11352 · ImageMagick
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-9144.
Published 17 Jul 2017 · Fixed in 6.9.8-9, 7.0.5-10 · NVD - Critical 9.8
CVE-2017-11329 · GLPI
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that is not a list of integers.
Published 17 Jul 2017 · NVD - Critical 9.8
CVE-2017-1000362 · Jenkins
The re-key admin monitor was introduced in Jenkins 1.498 and re-encrypted all secrets in JENKINS_HOME with a new key. It also created a backup directory with all old secrets, and the key used to encrypt them. These backups were world-readable and not removed afterwards. Jenkins now deletes the backup directory, if present. Upgrading from before 1.498 will no longer create a backup directory.…
Published 17 Jul 2017 · NVD - Critical 9.8
CVE-2017-1000056 · Kubernetes
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.
Published 17 Jul 2017 · NVD - High 7.5
CVE-2017-1000018 · phpMyAdmin
phpMyAdmin 4.0, 4.4., and 4.6 are vulnerable to a DOS attack in the replication status by using a specially crafted table name
Published 17 Jul 2017 · Fixed in 4.0.10.19, 4.4.15.10, 4.6.6 · NVD - High 8.8
CVE-2017-1000017 · phpMyAdmin
phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server
Published 17 Jul 2017 · Fixed in 4.0.10.19 · NVD - High 7.5
CVE-2017-1000016 · phpMyAdmin
A weakness was discovered where an attacker can inject arbitrary values in to the browser cookies. This is a re-issue of an incomplete fix from PMASA-2016-18.
Published 17 Jul 2017 · NVD - Medium 6.1
CVE-2017-1000015 · phpMyAdmin
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
Published 17 Jul 2017 · NVD - High 7.5
CVE-2017-1000014 · phpMyAdmin
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a DOS weakness in the table editing functionality
Published 17 Jul 2017 · NVD - Medium 6.1
CVE-2017-1000013 · phpMyAdmin
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
Published 17 Jul 2017 · NVD - High 8.8
CVE-2017-11310 · ImageMagick
The read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta) has memory leak vulnerabilities via crafted PNG files.
Published 13 Jul 2017 · NVD - High 7.5
CVE-2017-9789 · Apache HTTP Server
When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour.
Published 13 Jul 2017 · NVD - Critical 9.1
CVE-2017-9788 · Apache HTTP Server
In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially…
Published 13 Jul 2017 · NVD - High 7.5
CVE-2017-9787 · Apache Struts
When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.
Published 13 Jul 2017 · NVD - Medium 5.9
CVE-2017-7672 · Apache Struts
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts version 2.5.12.
Published 13 Jul 2017 · NVD - High 7.5
CVE-2017-7529 · nginx
Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.
Published 13 Jul 2017 · NVD - High 8.1
CVE-2017-11103 · Samba
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted…
Published 13 Jul 2017 · Fixed in 4.4.15, 4.5.12, 4.6.6 · NVD - High 7.5
CVE-2017-11188 · ImageMagick
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
Published 12 Jul 2017 · NVD - Medium 6.1
CVE-2017-8621 · Microsoft Exchange Server
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an open redirect vulnerability that could lead to spoofing, aka "Microsoft Exchange Open Redirect Vulnerability".
Published 11 Jul 2017 · NVD - Medium 6.1
CVE-2017-8560 · Microsoft Exchange Server
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8559.
Published 11 Jul 2017 · NVD - Medium 6.1
CVE-2017-8559 · Microsoft Exchange Server
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access (OWA) handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability". This CVE ID is unique from CVE-2017-8560.
Published 11 Jul 2017 · NVD - High 8.8
CVE-2017-11170 · ImageMagick
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.
Published 11 Jul 2017 · NVD - Medium 6.5
CVE-2017-11166 · ImageMagick
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.
Published 10 Jul 2017 · NVD - Critical 9.8Actively exploited
CVE-2017-9791 · Apache Struts
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
Published 10 Jul 2017 · NVD - Critical 9.1
CVE-2017-11147 · PHP
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
Published 10 Jul 2017 · Fixed in 5.6.30, 7.0.15, 7.1.1 · NVD - High 7.5
CVE-2017-11145 · PHP
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c…
Published 10 Jul 2017 · NVD - High 7.5
CVE-2017-11144 · PHP
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.
Published 10 Jul 2017 · NVD - High 7.5
CVE-2017-11143 · PHP
In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.
Published 10 Jul 2017 · NVD - High 7.5
CVE-2017-11142 · PHP
In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.
Published 10 Jul 2017 · NVD - High 7.5
CVE-2016-10397 · PHP
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:[email protected]/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).
Published 10 Jul 2017 · NVD - Medium 6.5
CVE-2017-11141 · ImageMagick
The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call.
Published 10 Jul 2017 · NVD - High 7.5
CVE-2017-7660 · Apache Solr
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism…
Published 7 Jul 2017 · NVD - High 7.5
CVE-2017-1000381 · c-ares, Node.js
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way.
Published 7 Jul 2017 · Fixed in 6.11.1, 7.10.1, 8.1.4 · NVD - Medium 5.5
CVE-2017-10995 · ImageMagick
The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted MNG image.
Published 7 Jul 2017 · NVD - Critical 9.8
CVE-2017-10989 · SQLite
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
Published 7 Jul 2017 · NVD - High 8.8
CVE-2017-10928 · ImageMagick
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from process memory or possibly have unspecified other impact via a crafted SVG document that is mishandled in the GetUserSpaceCoordinateValue function in coders/svg.c.
Published 5 Jul 2017 · NVD - Medium 6.5
CVE-2017-10923 · Xen
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225.
Published 5 Jul 2017 · NVD - High 7.5
CVE-2017-10922 · Xen
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3.
Published 5 Jul 2017 · NVD - Critical 10.0
CVE-2017-10921 · Xen
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 2.
Published 5 Jul 2017 · NVD - Critical 10.0
CVE-2017-10920 · Xen
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain privileged host OS access, aka XSA-224 bug 1.
Published 5 Jul 2017 · NVD - Medium 6.5
CVE-2017-10919 · Xen
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223.
Published 5 Jul 2017 · NVD - Critical 10.0
CVE-2017-10918 · Xen
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
Published 5 Jul 2017 · NVD - Critical 9.1
CVE-2017-10917 · Xen
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly obtain sensitive information, aka XSA-221.
Published 5 Jul 2017 · NVD - High 7.5
CVE-2017-10916 · Xen
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Published 5 Jul 2017 · NVD
Where it comes from
The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.
- NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
- OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
- WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
- Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
- The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
- CISA's Known Exploited Vulnerabilities catalog.
Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.
Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.