Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-13927 Exploited |
Not yet scored | Apache Airflow's Experimental API Applications & supply chain |
Apache Airflow's Experimental API Authentication Bypass | 18 Jan 2022 |
| CVE-2021-32648 Exploited |
Not yet scored | October CMS October CMS Applications & supply chain |
October CMS Improper Authentication | 18 Jan 2022 |
| CVE-2020-17463 Exploited |
Not yet scored | Fuel CMS Fuel CMS Applications & supply chain |
Fuel CMS SQL Injection Vulnerability | 10 Dec 2021 |
| CVE-2010-1871 Exploited |
Not yet scored | Red Hat JBoss Seam 2 Applications & supply chain |
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2021-44228 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2021-37415 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) Applications & supply chain |
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | 1 Dec 2021 |
| CVE-2020-11738 Exploited |
Not yet scored | WordPress Snap Creek Duplicator Plugin Applications & supply chain |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 |
| CVE-2019-9978 Exploited |
Not yet scored | WordPress Social Warfare Plugin Applications & supply chain |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2021-40539 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-8657 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Applications & supply chain |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2021-42258 Exploited |
Not yet scored | BQE BillQuick Web Suite Applications & supply chain |
BQE BillQuick Web Suite SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11580 Exploited |
Not yet scored | Atlassian Crowd and Crowd Data Center Applications & supply chain |
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1879 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Applications & supply chain |
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2018-11776 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2017-9805 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-15999 Exploited |
Not yet scored | Google Chrome FreeType Applications & supply chain |
Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-22205 Exploited |
Not yet scored | GitLab Community and Enterprise Editions Applications & supply chain |
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27101 Exploited |
Not yet scored | Accellion FTA Applications & supply chain |
Accellion FTA SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-30633 Exploited |
Not yet scored | Google Chromium Indexed DB API Applications & supply chain |
Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-33739 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0683 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0604 Exploited |
Not yet scored | Microsoft SharePoint Applications & supply chain |
Microsoft SharePoint Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-3235 Exploited |
Not yet scored | Microsoft Office Applications & supply chain |
Microsoft Office OLE DLL Side Loading Vulnerability | 3 Nov 2021 |
| CVE-2019-15949 Exploited |
Not yet scored | Nagios Nagios XI Applications & supply chain |
Nagios XI Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-10221 Exploited |
Not yet scored | rConfig rConfig Applications & supply chain |
rConfig OS Command Injection Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.