Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-35405 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 22 Sep 2022 |
| CVE-2022-26923 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 18 Aug 2022 |
| CVE-2022-22960 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
VMware Multiple Products Privilege Escalation Vulnerability | 15 Apr 2022 |
| CVE-2022-22954 Exploited |
Not yet scored | VMware Workspace ONE Access and Identity Manager Identity & access |
VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability | 14 Apr 2022 |
| CVE-2021-42278 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2021-42287 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 11 Apr 2022 |
| CVE-2022-26871 Exploited |
Not yet scored | Trend Micro Apex Central Identity & access |
Trend Micro Apex Central Arbitrary File Upload Vulnerability | 31 Mar 2022 |
| CVE-2013-4810 Exploited |
Not yet scored | Hewlett Packard (HP) ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management Identity & access |
HP Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-2021 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 25 Mar 2022 |
| CVE-2014-6324 Exploited |
Not yet scored | Microsoft Kerberos Key Distribution Center (KDC) Identity & access |
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2022-23131 Exploited |
Not yet scored | Zabbix Frontend Identity & access |
Zabbix Frontend Authentication Bypass Vulnerability | 22 Feb 2022 |
| CVE-2021-44515 Exploited |
Not yet scored | Zoho Desktop Central Identity & access |
Zoho Desktop Central Authentication Bypass Vulnerability | 10 Dec 2021 |
| CVE-2014-1812 Exploited |
Not yet scored | Microsoft Windows Identity & access |
Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-12271 Exploited |
Not yet scored | Sophos SFOS Identity & access |
Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-4427 Exploited |
Not yet scored | IBM Data Risk Manager Identity & access |
IBM Data Risk Manager Security Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-4006 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
Multiple VMware Products Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10189 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Desktop Central File Upload Vulnerability | 3 Nov 2021 |
| CVE-2021-22986 Exploited |
Not yet scored | F5 BIG-IP and BIG-IQ Centralized Management Identity & access |
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22506 Exploited |
Not yet scored | Micro Focus Micro Focus Access Manager Identity & access |
Micro Focus Access Manager Information Leakage Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.