CVE.org, NVD, CISA KEV and Ubuntu security notices are checked every hour. Follow the software you run, and we will email you when a new vulnerability is published or starts being exploited in the wild.
A memory corruption vulnerability in the QMqttClient class of the Qt MQTT module. Under certain MQTT 5 connection settings between client and server, QMqttClient may corrupt memory, which can cause the application to crash.
Zohocorp ManageEngine Password Manager Pro versions before 13236 and PAM360 versions before 8601 are vulnerable to an authenticated Remote Code Execution vulnerability.
Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the autofill service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment notifications when the merchant secret is unset, which is the default state, allowing unauthenticated attackers to forge a payment confirmation a…
Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
DoS vulnerability in the DSoftBus module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
DoS vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect availability.
OOB read vulnerability in the peripheral module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
UAF vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
Race condition vulnerability in the location service module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the WLAN module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
Buffer overflow vulnerability in the file preview module. Impact: Successful exploitation of this vulnerability may affect availability.
Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
DoS vulnerability in the file parsing module. Impact: Successful exploitation of this vulnerability may affect availability.
Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.
A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. Affected by this issue is the function str_replace of the file /var/www/html/zzmob/index.php of the component Mobile Site Directory. The manipulation of the argument dirname results in code …
The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in both primary and secondary user stores. This occurs because the lock condition is only applied to the secondary user st…
The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to execute administrative actions that should be restricted. This weakness permits unauthorized operations on the affected product. Successful …
A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. Affected by this vulnerability is the function _get_tpl_content of the file dayrui/Fcms/Library/Notice.php of the component Email Template Rendering. The manipulation leads to code injection. The…
A vulnerability was determined in dayrui XunRuiCMS up to 4.7.4. Affected is the function View of the file dayrui/Fcms/Core/View.php of the component Member Module. Executing a manipulation of the argument catid can lead to sql injection. It is possible to lau…
Vulnerabilities published in the last 30 days. Click for every CVE of the product and alerts.
CVE.org's official records (the vendor's own notice plus CISA's enrichment), the CISA KEV catalog and Ubuntu notices every hour; NVD's CPE names and scores every 2 hours, as NVD asks; EPSS daily.
Each record is matched to 90+ products by the vendor's own product names and CPE names: nginx, PHP, Apache, Windows 10/11/Server, Ubuntu LTS releases, the Linux kernel, network appliances…
When a product you follow gets a new CVE, when a vulnerability enters the exploited list, or when Ubuntu ships the fix, you get an email — instantly or as a daily digest.
A CVE (Common Vulnerabilities and Exposures) ID is the unique number given to each published vulnerability, such as CVE-2024-4577. It is assigned by the organisation that found it or owns the software (a CNA) and published at CVE.org.
CVSS rates a vulnerability's technical severity from 0 to 10: 9.0 and above is critical, 7.0–8.9 high, 4.0–6.9 medium. It measures how easily and how remotely the flaw can be used — not whether anyone is actually using it.
CISA KEV lists vulnerabilities with proof of exploitation in real attacks; if one is on it, patch without waiting. EPSS estimates the chance a vulnerability is exploited in the next 30 days. Together they tell you which of thousands of CVEs to patch first.
Sources are checked every hour; with instant delivery a CVE matching a product you follow is in your inbox within the hour. When many appear at once they are bundled into one email.
No. IP-DB is a free, public-interest service; all alerts need is an account with a verified email address.
Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.
