Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-0185 Exploited |
Not yet scored | Linux Kernel Applications & supply chain |
Linux Kernel Heap-Based Buffer Overflow Vulnerability | 21 Aug 2024 |
| CVE-2024-38107 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability | 13 Aug 2024 |
| CVE-2024-39891 Exploited |
Not yet scored | Twilio Authy Applications & supply chain |
Twilio Authy Information Disclosure Vulnerability | 23 Jul 2024 |
| CVE-2024-34102 Exploited |
Not yet scored | Adobe Commerce and Magento Open Source Applications & supply chain |
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability | 17 Jul 2024 |
| CVE-2020-13965 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 26 Jun 2024 |
| CVE-2024-4577 Exploited |
Not yet scored | PHP Group PHP Applications & supply chain |
PHP-CGI OS Command Injection Vulnerability | 12 Jun 2024 |
| CVE-2024-30051 Exploited |
Not yet scored | Microsoft DWM Core Library Applications & supply chain |
Microsoft DWM Core Library Privilege Escalation Vulnerability | 14 May 2024 |
| CVE-2023-43770 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 12 Feb 2024 |
| CVE-2023-7024 Exploited |
Not yet scored | Google Chromium WebRTC Applications & supply chain |
Google Chromium WebRTC Heap Buffer Overflow Vulnerability | 2 Jan 2024 |
| CVE-2023-49103 Exploited |
Not yet scored | ownCloud ownCloud graphapi Applications & supply chain |
ownCloud graphapi Information Disclosure Vulnerability | 30 Nov 2023 |
| CVE-2023-4911 Exploited |
Not yet scored | GNU GNU C Library Applications & supply chain |
GNU C Library Buffer Overflow Vulnerability | 21 Nov 2023 |
| CVE-2023-36033 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-5631 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 26 Oct 2023 |
| CVE-2018-14667 Exploited |
Not yet scored | Red Hat JBoss RichFaces Framework Applications & supply chain |
Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability | 28 Sep 2023 |
| CVE-2021-44026 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail SQL Injection Vulnerability | 22 Jun 2023 |
| CVE-2020-35730 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability | 22 Jun 2023 |
| CVE-2016-3427 Exploited |
Not yet scored | Oracle Java SE and JRockit Applications & supply chain |
Oracle Java SE and JRockit Unspecified Vulnerability | 12 May 2023 |
| CVE-2016-8735 Exploited |
Not yet scored | Apache Tomcat Applications & supply chain |
Apache Tomcat Remote Code Execution Vulnerability | 12 May 2023 |
| CVE-2021-45046 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 1 May 2023 |
| CVE-2017-7494 Exploited |
Not yet scored | Samba Samba Applications & supply chain |
Samba Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2022-42948 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability | 30 Mar 2023 |
| CVE-2022-39197 Exploited |
Not yet scored | Fortra Cobalt Strike Applications & supply chain |
Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability | 30 Mar 2023 |
| CVE-2022-35914 Exploited |
Not yet scored | Teclib GLPI Applications & supply chain |
Teclib GLPI Remote Code Execution Vulnerability | 7 Mar 2023 |
| CVE-2022-36537 Exploited |
Not yet scored | ZK Framework AuUploader Applications & supply chain |
ZK Framework AuUploader Unspecified Vulnerability | 27 Feb 2023 |
| CVE-2022-21587 Exploited |
Not yet scored | Oracle E-Business Suite Applications & supply chain |
Oracle E-Business Suite Unspecified Vulnerability | 2 Feb 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.