Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2011-3544 Exploited |
Not yet scored | Oracle Java SE JDK and JRE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-0507 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-1723 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2022-24682 Exploited |
Not yet scored | Synacor Zimbra Collaborate Suite (ZCS) Applications & supply chain |
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 25 Feb 2022 |
| CVE-2017-9841 Exploited |
Not yet scored | PHPUnit PHPUnit Applications & supply chain |
PHPUnit Command Injection Vulnerability | 15 Feb 2022 |
| CVE-2022-24086 Exploited |
Not yet scored | Adobe Commerce and Magento Open Source Applications & supply chain |
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 15 Feb 2022 |
| CVE-2017-9791 Exploited |
Not yet scored | Apache Struts 1 Applications & supply chain |
Apache Struts 1 Improper Input Validation Vulnerability | 10 Feb 2022 |
| CVE-2016-3088 Exploited |
Not yet scored | Apache ActiveMQ Applications & supply chain |
Apache ActiveMQ Improper Input Validation Vulnerability | 10 Feb 2022 |
| CVE-2020-5722 Exploited |
Not yet scored | Grandstream UCM6200 Applications & supply chain |
Grandstream Networks UCM6200 Series SQL Injection Vulnerability | 28 Jan 2022 |
| CVE-2020-13927 Exploited |
Not yet scored | Apache Airflow's Experimental API Applications & supply chain |
Apache Airflow's Experimental API Authentication Bypass | 18 Jan 2022 |
| CVE-2021-21315 Exploited |
Not yet scored | Npm package System Information Library for Node.JS Applications & supply chain |
System Information Library for Node.JS Command Injection | 18 Jan 2022 |
| CVE-2021-32648 Exploited |
Not yet scored | October CMS October CMS Applications & supply chain |
October CMS Improper Authentication | 18 Jan 2022 |
| CVE-2021-21975 Exploited |
Not yet scored | VMware vRealize Operations Manager API Applications & supply chain |
VMware Server Side Request Forgery in vRealize Operations Manager API | 18 Jan 2022 |
| CVE-2021-44228 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2010-1871 Exploited |
Not yet scored | Red Hat JBoss Seam 2 Applications & supply chain |
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2020-17463 Exploited |
Not yet scored | Fuel CMS Fuel CMS Applications & supply chain |
Fuel CMS SQL Injection Vulnerability | 10 Dec 2021 |
| CVE-2021-37415 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) Applications & supply chain |
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | 1 Dec 2021 |
| CVE-2019-15949 Exploited |
Not yet scored | Nagios Nagios XI Applications & supply chain |
Nagios XI Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0604 Exploited |
Not yet scored | Microsoft SharePoint Applications & supply chain |
Microsoft SharePoint Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-10221 Exploited |
Not yet scored | rConfig rConfig Applications & supply chain |
rConfig OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2017-16651 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail File Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-16846 Exploited |
Not yet scored | SaltStack Salt Applications & supply chain |
SaltStack Salt Shell Injection Vulnerability | 3 Nov 2021 |
| CVE-2010-5326 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-9563 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver XML External Entity (XXE) Vulnerability | 3 Nov 2021 |
| CVE-2020-6287 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.