Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2017-16651 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail File Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-16846 Exploited |
Not yet scored | SaltStack Salt Applications & supply chain |
SaltStack Salt Shell Injection Vulnerability | 3 Nov 2021 |
| CVE-2010-5326 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-9563 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver XML External Entity (XXE) Vulnerability | 3 Nov 2021 |
| CVE-2020-6287 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
| CVE-2016-3976 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-10148 Exploited |
Not yet scored | SolarWinds Orion Applications & supply chain |
SolarWinds Orion Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2017-9248 Exploited |
Not yet scored | Progress ASP.NET AJAX and Sitefinity Applications & supply chain |
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability | 3 Nov 2021 |
| CVE-2020-5847 Exploited |
Not yet scored | Unraid Unraid Applications & supply chain |
Unraid Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-16759 Exploited |
Not yet scored | vBulletin vBulletin Applications & supply chain |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21972 Exploited |
Not yet scored | VMware vCenter Server Applications & supply chain |
VMware vCenter Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-25213 Exploited |
Not yet scored | WordPress File Manager Plugin Applications & supply chain |
WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.