Vulnerability database · updated every 15 minutes
New vulnerabilities in the software websites run.
CVEs and security advisories for WordPress, its plugins and themes, npm, PyPI and the servers behind websites, merged from NVD, the CVE Program, GitHub, OSV.dev and WPVulnerability, with CISA's list of the ones attackers exploit.
- Tracked
- 40,168
- Published in 7 days
- 1,165
- Critical in 30 days
- 351
- Actively exploited
- 423
Latest vulnerabilities
40,168 vulnerabilities- Medium 5.0
CVE-2001-0096 · Microsoft IIS
FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability.
Published 12 Feb 2001 · NVD - High 10.0
CVE-2001-0013 · BIND 9
Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Published 12 Feb 2001 · NVD - Medium 5.0
CVE-2001-0012 · BIND 9
BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
Published 12 Feb 2001 · NVD - High 10.0
CVE-2001-0011 · BIND 9
Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
Published 12 Feb 2001 · NVD - High 10.0
CVE-2001-0010 · BIND 9
Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
Published 12 Feb 2001 · NVD - Medium 5.0
CVE-2001-0004 · Microsoft IIS
IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.
Published 12 Feb 2001 · NVD - High 7.5
CVE-2001-1454 · MySQL
Buffer overflow in MySQL before 3.23.33 allows remote attackers to execute arbitrary code via a long drop database request.
Published 9 Feb 2001 · NVD - High 7.5
CVE-2001-1453 · MySQL
Buffer overflow in libmysqlclient.so in MySQL 3.23.33 and earlier allows remote attackers to execute arbitrary code via a long host parameter.
Published 9 Feb 2001 · NVD - High 7.5
CVE-2001-1274 · MySQL
Buffer overflow in MySQL before 3.23.31 allows attackers to cause a denial of service and possibly gain privileges.
Published 23 Jan 2001 · NVD - High 7.2
CVE-2001-1275 · MySQL
MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.
Published 19 Jan 2001 · NVD - Medium 5.0
CVE-2001-1385 · PHP
The Apache module for PHP 4.0.0 through PHP 4.0.4, when disabled with the 'engine = off' option for a virtual host, may disable PHP for other virtual hosts, which could cause Apache to serve the source code of PHP scripts.
Published 12 Jan 2001 · NVD - High 7.5
CVE-2000-1169 · OpenSSH
OpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent.
Published 9 Jan 2001 · NVD - High 7.5
CVE-2000-1139 · Microsoft Exchange Server
The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
Published 9 Jan 2001 · NVD - High 7.5
CVE-2000-1104 · Microsoft IIS
Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.
Published 9 Jan 2001 · NVD - Medium 5.0
CVE-2000-0992 · OpenSSH
Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.
Published 19 Dec 2000 · NVD - High 7.2
CVE-2000-0981 · MySQL
MySQL Database Engine uses a weak authentication method which leaks information that could be used by a remote attacker to recover the password.
Published 19 Dec 2000 · NVD - High 7.5
CVE-2000-0970 · Microsoft IIS
IIS 4.0 and 5.0 .ASP pages send the same Session ID cookie for secure and insecure web sessions, which could allow remote attackers to hijack the secure web session of the user if that user moves to an insecure session, aka the "Session ID Cookie Marking" vulnerability.
Published 19 Dec 2000 · NVD - High 10.0
CVE-2000-0967 · PHP
PHP 3 and 4 do not properly cleanse user-injected format strings, which allows remote attackers to execute arbitrary commands by triggering error messages that are improperly written to the error logs.
Published 19 Dec 2000 · NVD - Low 1.2
CVE-2000-0959 · GNU C Library
glibc2 does not properly clear the LD_DEBUG_OUTPUT and LD_DEBUG environmental variables when a program is spawned from a setuid program, which could allow local users to overwrite files via a symlink attack.
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0951 · Microsoft IIS
A misconfiguration in IIS 5.0 with Index Server enabled and the Index property set allows remote attackers to list directories in the web root via a Web Distributed Authoring and Versioning (WebDAV) search.
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0939 · Samba
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows remote attackers to cause a denial of service by repeatedly submitting a nonstandard URL in the GET HTTP request and forcing it to restart.
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0938 · Samba
Samba Web Administration Tool (SWAT) in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server.
Published 19 Dec 2000 · NVD - High 7.5
CVE-2000-0937 · Samba
Samba Web Administration Tool (SWAT) in Samba 2.0.7 does not log login attempts in which the username is correct but the password is wrong, which allows remote attackers to conduct brute force password guessing attacks.
Published 19 Dec 2000 · NVD - Low 2.1
CVE-2000-0936 · Samba
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, which allows local users to read sensitive information such as user names and passwords.
Published 19 Dec 2000 · NVD - High 7.2
CVE-2000-0935 · Samba
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack on the cgi.log file.
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0913 · Apache HTTP Server
mod_rewrite in Apache 1.3.12 and earlier allows remote attackers to read arbitrary files if a RewriteRule directive is expanded to include a filename whose name contains a regular expression.
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0888 · BIND 9
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
Published 19 Dec 2000 · NVD - Medium 5.0
CVE-2000-0887 · BIND 9
named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
Published 19 Dec 2000 · NVD - High 7.5
CVE-2000-0886 · Microsoft IIS
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name is appended with operating system commands, aka the "Web Server File Request Parsing" vulnerability.
Published 19 Dec 2000 · NVD - High 7.5
CVE-2000-0884 · Microsoft IIS
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary commands, via malformed URLs that contain UNICODE encoded characters, aka the "Web Server Folder Traversal" vulnerability.
Published 19 Dec 2000 · NVD - High 10.0
CVE-2000-1029 · BIND 9
Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
Published 11 Dec 2000 · NVD - Medium 5.0
CVE-2000-1006 · Microsoft Exchange Server
Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability.
Published 11 Dec 2000 · NVD - High 10.0
CVE-2000-0999 · OpenSSH
Format string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating systems) allow attackers to gain root privileges.
Published 11 Dec 2000 · NVD - Medium 5.0
CVE-2000-0869 · Apache HTTP Server
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 enables WebDAV, which allows remote attackers to list arbitrary directories via the PROPFIND HTTP request method.
Published 14 Nov 2000 · NVD - Medium 5.0
CVE-2000-0868 · Apache HTTP Server
The default configuration of Apache 1.3.12 in SuSE Linux 6.4 allows remote attackers to read source code for CGI scripts by replacing the /cgi-bin/ in the requested URL with /cgi-bin-sdb/.
Published 14 Nov 2000 · NVD - Medium 5.0
CVE-2000-0860 · PHP
The file upload capability in PHP versions 3 and 4 allows remote attackers to read arbitrary files by setting hidden form fields whose names match the names of internal PHP script variables.
Published 14 Nov 2000 · NVD - High 10.0
CVE-2000-0848 · IBM WebSphere Application Server
Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request header.
Published 14 Nov 2000 · NVD - High 7.2
CVE-2000-0824 · GNU C Library
The unsetenv function in glibc 2.1.1 does not properly unset an environmental variable if the variable is provided twice to a program, which could allow local users to execute arbitrary commands in setuid programs by specifying their own duplicate environmental variables such as LD_PRELOAD or LD_LIBRARY_PATH.
Published 14 Nov 2000 · NVD - Medium 5.0
CVE-2000-0778 · Microsoft IIS
IIS 5.0 allows remote attackers to obtain source code for .ASP files and other scripts via an HTTP GET request with a "Translate: f" header, aka the "Specialized Header" vulnerability.
Published 20 Oct 2000 · NVD - Medium 6.4
CVE-2000-0770 · Microsoft IIS
IIS 4.0 and 5.0 does not properly restrict access to certain types of files when their parent folders have less restrictive permissions, which could allow remote attackers to bypass access restrictions to some files, aka the "File Permission Canonicalization" vulnerability.
Published 20 Oct 2000 · NVD - Medium 6.4
CVE-2000-0760 · Apache Tomcat
The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
Published 20 Oct 2000 · NVD - Medium 6.4
CVE-2000-0759 · Apache Tomcat
Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
Published 20 Oct 2000 · NVD - High 7.5
CVE-2000-0746 · Microsoft IIS
Vulnerabilities in IIS 4.0 and 5.0 do not properly protect against cross-site scripting (CSS) attacks. They allow a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site, aka the "IIS Cross-Site Scripting" vulnerabilities.
Published 20 Oct 2000 · NVD - Medium 5.0
CVE-2000-1204 · Apache HTTP Server
Vulnerability in the mod_vhost_alias virtual hosting module for Apache 1.3.9, 1.3.11 and 1.3.12 allows remote attackers to obtain the source code for CGI programs if the cgi-bin directory is under the document root.
Published 13 Oct 2000 · NVD - Medium 5.0
CVE-2000-0652 · IBM WebSphere Application Server
IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.
Published 24 Jul 2000 · NVD - Medium 5.0
CVE-2000-0672 · Apache Tomcat
The default configuration of Jakarta Tomcat does not restrict access to the /admin context, which allows remote attackers to read arbitrary files by directly calling the administrative servlets to add a context for the root directory.
Published 20 Jul 2000 · NVD - Medium 5.0
CVE-2000-0630 · Microsoft IIS
IIS 4.0 and 5.0 allows remote attackers to obtain fragments of source code by appending a +.htr to the URL, a variant of the "File Fragment Reading via .HTR" vulnerability.
Published 17 Jul 2000 · NVD - Medium 5.0
CVE-2000-0631 · Microsoft IIS
An administrative script from IIS 3.0, later included in IIS 4.0 and 5.0, allows remote attackers to cause a denial of service by accessing the script without a particular argument, aka the "Absent Directory Browser Argument" vulnerability.
Published 14 Jul 2000 · NVD - Low 2.6
CVE-2000-0649 · Microsoft IIS
IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
Published 13 Jul 2000 · NVD - High 7.6
CVE-1999-0812 · Samba
Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations.
Published 12 Jul 2000 · NVD
Where it comes from
The list holds every advisory UpHeron reads for the software it watches: WordPress and every plugin and theme its plugin reports, the packages in monitored repositories and manifests, and the servers and frameworks found on monitored websites. One vulnerability from several sources is one entry, under its CVE.
- NVD, the US National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- New and changed records of the CVE Program, read every 15 minutes, so a rating or fix added after a CVE is published reaches the list, and its alerts, within the hour. CVE content © 1999–2026 The MITRE Corporation, used under the CVE terms of use; CVE® is a registered trademark of The MITRE Corporation.
- OSV.dev, with the GitHub Advisory Database (CC BY 4.0).
- WPVulnerability (CC0) for WordPress plugins and themes, and WordPress's own security advisories.
- Node.js's own security release posts, read every 15 minutes, which name its vulnerabilities the day they are fixed, days before their CVE records.
- The security advisories projects publish on GitHub, and the CVEs libraries such as Brotli name in their release notes, which also count for the runtimes that bundle them.
- CISA's Known Exploited Vulnerabilities catalog.
Each day's new ones, grouped, and every critical one as soon as we find it: on the blog.
Run WordPress? The UpHeron plugin alerts you the day one of these affects your own site.