UpHeron

Vulnerability database · updated every 15 minutes

New vulnerabilities in the software websites run.

CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.

Free · right away or once a day · unsubscribe in one click
Tracked
40,159
Published in 7 days
1,158
Critical in 30 days
351
Actively exploited
423

Latest vulnerabilities

40,159 vulnerabilities
  1. High 7.8

    CVE-2002-0184 · sudo

    Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privileges via special characters in the -p (prompt) argument, which are not properly expanded.

    Published 16 May 2002 · Fixed in 1.6.6 · NVD
  2. Medium 5.0

    CVE-2002-1592 · Apache HTTP Server

    The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.

    Published 6 May 2002 · NVD
  3. High 7.5

    CVE-2002-0150 · Microsoft IIS

    Buffer overflow in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to spoof the safety check for HTTP headers and cause a denial of service or execute arbitrary code via HTTP header field values.

    Published 22 Apr 2002 · NVD
  4. High 7.5

    CVE-2002-0149 · Microsoft IIS

    Buffer overflow in ASP Server-Side Include Function in IIS 4.0, 5.0 and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.

    Published 22 Apr 2002 · NVD
  5. High 7.5

    CVE-2002-0148 · Microsoft IIS

    Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other users via an HTTP error page.

    Published 22 Apr 2002 · NVD
  6. High 7.5

    CVE-2002-0147 · Microsoft IIS

    Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code, aka "Microsoft-discovered variant of Chunked Encoding buffer overrun."

    Published 22 Apr 2002 · NVD
  7. High 7.5

    CVE-2002-0079 · Microsoft IIS

    Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

    Published 22 Apr 2002 · NVD
  8. High 7.5

    CVE-2002-0075 · Microsoft IIS

    Cross-site scripting vulnerability for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary script as other web users via the error message used in a URL redirect (""302 Object Moved") message.

    Published 22 Apr 2002 · NVD
  9. High 7.5

    CVE-2002-0074 · Microsoft IIS

    Cross-site scripting vulnerability in Help File search facility for Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to embed scripts into another user's session.

    Published 22 Apr 2002 · NVD
  10. Medium 5.0

    CVE-2002-0073 · Microsoft IIS

    The FTP service in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows attackers who have established an FTP session to cause a denial of service via a specially crafted status request containing glob characters.

    Published 22 Apr 2002 · NVD
  11. Medium 5.0

    CVE-2002-0072 · Microsoft IIS

    The w3svc.dll ISAPI filter in Front Page Server Extensions and ASP.NET for Internet Information Server (IIS) 4.0, 5.0, and 5.1 does not properly handle the error condition when a long URL is provided, which allows remote attackers to cause a denial of service (crash) when the URL parser accesses a null pointer.

    Published 22 Apr 2002 · NVD
  12. High 7.5

    CVE-2002-0071 · Microsoft IIS

    Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

    Published 22 Apr 2002 · NVD
  13. Low 2.1

    CVE-2002-0121 · PHP

    PHP 4.0 through 4.1.1 stores session IDs in temporary files whose name contains the session ID, which allows local users to hijack web connections.

    Published 25 Mar 2002 · NVD
  14. Medium 5.0

    CVE-2000-1210 · Apache Tomcat

    Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.

    Published 22 Mar 2002 · NVD
  15. High 7.5

    CVE-2002-0061 · Apache HTTP Server

    Apache for Win32 before 1.3.24, and 2.0.x before 2.0.34-beta, allows remote attackers to execute arbitrary commands via shell metacharacters (a | pipe character) provided as arguments to batch (.bat) or .cmd scripts, which are sent unfiltered to the shell interpreter, typically cmd.exe.

    Published 21 Mar 2002 · Fixed in 1.3.24, 2.0.34 · NVD
  16. Critical 9.8

    CVE-2002-0083 · OpenSSH

    Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.

    Published 15 Mar 2002 · Fixed in 3.1 · NVD
  17. Low 2.1

    CVE-2002-0080 · rsync

    rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.

    Published 15 Mar 2002 · Fixed in 2.5.3 · NVD
  18. High 7.5

    CVE-2002-0081 · PHP

    Buffer overflows in (1) php_mime_split in PHP 4.1.0, 4.1.1, and 4.0.6 and earlier, and (2) php3_mime_split in PHP 3.0.x allows remote attackers to execute arbitrary code via a multipart/form-data HTTP POST request when file_uploads is enabled.

    Published 8 Mar 2002 · NVD
  19. Medium 5.0

    CVE-2002-0055 · Microsoft Exchange Server

    SMTP service in Microsoft Windows 2000, Windows XP Professional, and Exchange 2000 allows remote attackers to cause a denial of service via a command with a malformed data transfer (BDAT) request.

    Published 8 Mar 2002 · NVD
  20. High 7.5

    CVE-2002-0054 · Microsoft Exchange Server

    SMTP service in (1) Microsoft Windows 2000 and (2) Internet Mail Connector (IMC) in Exchange Server 5.5 does not properly handle responses to NTLM authentication, which allows remote attackers to perform mail relaying via an SMTP AUTH command using null session credentials.

    Published 8 Mar 2002 · NVD
  21. Medium 6.4

    CVE-2002-0049 · Microsoft Exchange Server

    Microsoft Exchange Server 2000 System Attendant gives "Everyone" group privileges to the WinReg key, which could allow remote attackers to read or modify registry keys.

    Published 8 Mar 2002 · NVD
  22. Medium 6.8

    CVE-2001-1585 · OpenSSH

    SSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as other users by supplying a public key from that user's authorized_keys file.

    Published 31 Dec 2001 · NVD
  23. High 7.5

    CVE-2001-1563 · Apache Tomcat

    Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this issue is already covered by other CVE identifiers.

    Published 31 Dec 2001 · NVD
  24. Medium 5.0

    CVE-2001-1556 · Apache HTTP Server

    The log files in Apache web server contain information directly supplied by clients and does not filter or quote control characters, which could allow remote attackers to hide HTTP requests and spoof source IP addresses when logs are viewed with UNIX programs such as cat, tail, and grep.

    Published 31 Dec 2001 · Fixed in 1.3.31, 2.0.49 · NVD
  25. Low 2.1

    CVE-2001-1534 · Apache HTTP Server

    mod_usertrack in Apache 1.3.11 through 1.3.20 generates session ID's using predictable information including host IP address, system time and server process ID, which allows local users to obtain session ID's and bypass authentication when these session ID's are used for authentication.

    Published 31 Dec 2001 · NVD
  26. Medium 4.6

    CVE-2001-1530 · Webmin

    run.cgi in Webmin 0.80 and 0.88 creates temporary files with world-writable permissions, which allows local users to execute arbitrary commands.

    Published 31 Dec 2001 · NVD
  27. High 7.5

    CVE-2001-1507 · OpenSSH

    OpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could allow remote attackers to login unchallenged.

    Published 31 Dec 2001 · NVD
  28. High 7.2

    CVE-2001-0872 · OpenSSH

    OpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment variables such as LD_PRELOAD, which allows local users to gain root privileges.

    Published 21 Dec 2001 · NVD
  29. High 10.0

    CVE-2001-1196 · Webmin

    Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.

    Published 17 Dec 2001 · NVD
  30. Medium 4.6

    CVE-2001-1189 · IBM WebSphere Application Server

    IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script.

    Published 13 Dec 2001 · NVD
  31. Medium 5.0

    CVE-2001-1186 · Microsoft IIS

    Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.

    Published 11 Dec 2001 · NVD
  32. Medium 6.4

    CVE-2001-1247 · PHP

    PHP 4.0.4pl1 and 4.0.5 in safe mode allows remote attackers to read and write files owned by the web server UID by uploading a PHP script that uses the error_log function to access the files.

    Published 6 Dec 2001 · NVD
  33. Medium 5.1

    CVE-2001-0829 · Apache Tomcat

    A cross-site scripting vulnerability in Apache Tomcat 3.2.1 allows a malicious webmaster to embed Javascript in a request for a .JSP file, which causes the Javascript to be inserted into an error message.

    Published 6 Dec 2001 · NVD
  34. High 7.5

    CVE-2001-0824 · IBM WebSphere Application Server

    Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.

    Published 6 Dec 2001 · NVD
  35. High 7.5

    CVE-2001-0816 · OpenSSH

    OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.

    Published 6 Dec 2001 · NVD
  36. High 7.5

    CVE-2001-0726 · Microsoft Exchange Server

    Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.

    Published 6 Dec 2001 · NVD
  37. High 7.5

    CVE-2001-1449 · Apache HTTP Server

    The default installation of Apache before 1.3.19 on Mandrake Linux 7.1 through 8.0 and Linux Corporate Server 1.0.1 allows remote attackers to list the directory index of arbitrary web directories.

    Published 28 Nov 2001 · NVD
  38. Medium 5.0

    CVE-2001-0917 · Apache Tomcat

    Jakarta Tomcat 4.0.1 allows remote attackers to reveal physical path information by requesting a long URL with a .JSP extension.

    Published 22 Nov 2001 · NVD
  39. High 7.5

    CVE-2001-0902 · Microsoft IIS

    Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.

    Published 20 Nov 2001 · NVD
  40. Medium 5.0

    CVE-2001-0730 · Apache HTTP Server

    split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.

    Published 30 Oct 2001 · NVD
  41. Medium 5.0

    CVE-2001-0729 · Apache HTTP Server

    Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.

    Published 30 Oct 2001 · NVD
  42. Low 2.1

    CVE-2001-0666 · Microsoft Exchange Server

    Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.

    Published 30 Oct 2001 · NVD
  43. Medium 5.0

    CVE-2001-0660 · Microsoft Exchange Server

    Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).

    Published 30 Oct 2001 · NVD
  44. Low 2.1

    CVE-2001-0544 · Microsoft IIS

    IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.

    Published 30 Oct 2001 · NVD
  45. High 7.5

    CVE-2001-1380 · OpenSSH

    OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh/authorized_keys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses.

    Published 18 Oct 2001 · NVD
  46. Critical 9.8

    CVE-2001-0766 · Apache HTTP Server

    Apache on MacOS X Client 10.0.3 with the HFS+ file system allows remote attackers to bypass access restrictions via a URL that contains some characters whose case is not matched by Apache's filters.

    Published 18 Oct 2001 · NVD
  47. Medium 4.6

    CVE-2001-1255 · MySQL

    WinMySQLadmin 1.1 stores the MySQL password in plain text in the my.ini file, which allows local users to obtain unathorized access the MySQL database.

    Published 2 Oct 2001 · NVD
  48. Medium 5.0

    CVE-2001-0731 · Apache HTTP Server

    Apache 1.3.20 with Multiviews enabled allows remote attackers to view directory contents and bypass the index page via a URL containing the "M=D" query string.

    Published 1 Oct 2001 · NVD
  49. Medium 5.0

    CVE-2001-1382 · OpenSSH

    The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

    Published 27 Sept 2001 · NVD
  50. Low 2.1

    CVE-2001-1029 · OpenSSH

    libutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the capabilities for reading the copyright and welcome files, which allows local users to bypass the capabilities checks and read arbitrary files by specifying alternate copyright or welcome files.

    Published 20 Sept 2001 · NVD

Where it comes from

The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.

  • NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
  • New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
  • OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
  • WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
  • Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
  • The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
  • CISA's Known Exploited Vulnerabilities catalog.

Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.

Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.