Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-5631 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 26 Oct 2023 |
| CVE-2018-14667 Exploited |
Not yet scored | Red Hat JBoss RichFaces Framework Applications & supply chain |
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 28 Sep 2023 |
| CVE-2021-44026 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail SQL Injection Vulnerability | 22 Jun 2023 |
| CVE-2020-35730 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 22 Jun 2023 |
| CVE-2016-8735 Exploited |
Not yet scored | Apache Tomcat Applications & supply chain |
Apache Tomcat Remote Code Execution Vulnerability | 12 May 2023 |
| CVE-2016-3427 Exploited |
Not yet scored | Oracle Java SE and JRockit Applications & supply chain |
Oracle Java SE and JRockit Unspecified Vulnerability | 12 May 2023 |
| CVE-2021-45046 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 1 May 2023 |
| CVE-2022-39197 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 30 Mar 2023 |
| CVE-2022-42948 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2017-7494 Exploited |
Not yet scored | Samba Samba Applications & supply chain |
Samba Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2022-35914 Exploited |
Not yet scored | Teclib GLPI Applications & supply chain |
Teclib GLPI Remote Code Execution Vulnerability | 7 Mar 2023 |
| CVE-2022-36537 Exploited |
Not yet scored | ZK Framework AuUploader Applications & supply chain |
ZK Framework AuUploader Unspecified Vulnerability | 27 Feb 2023 |
| CVE-2022-21587 Exploited |
Not yet scored | Oracle E-Business Suite Applications & supply chain |
Oracle E-Business Suite Unspecified Vulnerability | 2 Feb 2023 |
| CVE-2023-22952 Exploited |
Not yet scored | SugarCRM Multiple Products Applications & supply chain |
Multiple SugarCRM Products Remote Code Execution Vulnerability | 2 Feb 2023 |
| CVE-2022-47966 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 23 Jan 2023 |
| CVE-2018-18809 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Library Directory Traversal Vulnerability | 29 Dec 2022 |
| CVE-2018-5430 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Server Information Disclosure Vulnerability | 29 Dec 2022 |
| CVE-2022-26501 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-26500 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-41352 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Applications & supply chain |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 20 Oct 2022 |
| CVE-2022-36804 Exploited |
Not yet scored | Atlassian Bitbucket Server and Data Center Applications & supply chain |
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 30 Sep 2022 |
| CVE-2022-2294 Exploited |
Not yet scored | WebRTC WebRTC Applications & supply chain |
WebRTC Heap Buffer Overflow Vulnerability | 25 Aug 2022 |
| CVE-2022-26352 Exploited |
Not yet scored | dotCMS dotCMS Applications & supply chain |
dotCMS Unrestricted Upload of File Vulnerability | 25 Aug 2022 |
| CVE-2020-36193 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Improper Link Resolution Vulnerability | 25 Aug 2022 |
| CVE-2020-28949 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 25 Aug 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.