Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-34362 Exploited |
Not yet scored | Progress MOVEit Transfer Cloud & SaaS |
Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 |
| CVE-2021-39144 Exploited |
Not yet scored | XStream XStream Cloud & SaaS |
XStream Remote Code Execution Vulnerability | 10 Mar 2023 |
| CVE-2022-22963 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Cloud & SaaS |
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 25 Aug 2022 |
| CVE-2022-20821 Exploited |
Not yet scored | Cisco IOS XR Cloud & SaaS |
Cisco IOS XR Open Port Vulnerability | 23 May 2022 |
| CVE-2022-22947 Exploited |
Not yet scored | VMware Spring Cloud Gateway Cloud & SaaS |
VMware Spring Cloud Gateway Code Injection Vulnerability | 16 May 2022 |
| CVE-2020-5410 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Configuration (Config) Server Cloud & SaaS |
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2017-6316 Exploited |
Not yet scored | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Cloud & SaaS |
Citrix Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2021-21973 Exploited |
Not yet scored | VMware vCenter Server and Cloud Foundation Cloud & SaaS |
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 7 Mar 2022 |
| CVE-2019-15752 Exploited |
Not yet scored | Docker Desktop Community Edition Cloud & SaaS |
Docker Desktop Community Edition Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-17496 Exploited |
Not yet scored | vBulletin vBulletin Cloud & SaaS |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0938 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38647 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1020 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38645 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38649 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38648 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.