Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-2051 Exploited |
Not yet scored | D-Link DIR-645 Router Network & security devices |
D-Link DIR-645 Router Remote Code Execution Vulnerability | 10 Feb 2022 |
| CVE-2021-20038 Exploited |
Not yet scored | SonicWall SMA 100 Appliances Network & security devices |
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability | 28 Jan 2022 |
| CVE-2021-22991 Exploited |
Not yet scored | F5 BIG-IP Traffic Management Microkernel Network & security devices |
F5 BIG-IP Traffic Management Microkernel Buffer Overflow | 18 Jan 2022 |
| CVE-2019-1579 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 10 Jan 2022 |
| CVE-2018-13383 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy Network & security devices |
Fortinet FortiOS and FortiProxy Out-of-bounds Write | 10 Jan 2022 |
| CVE-2018-13382 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy Network & security devices |
Fortinet FortiOS and FortiProxy Improper Authorization | 10 Jan 2022 |
| CVE-2021-44168 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Arbitrary File Download | 10 Dec 2021 |
| CVE-2018-14847 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik Router OS Directory Traversal Vulnerability | 1 Dec 2021 |
| CVE-2021-20016 Exploited |
Not yet scored | SonicWall SSLVPN SMA100 Network & security devices |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10181 Exploited |
Not yet scored | Sumavision Enhanced Multimedia Router (EMR) Network & security devices |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 3 Nov 2021 |
| CVE-2017-6327 Exploited |
Not yet scored | Symantec Symantec Messaging Gateway Network & security devices |
Symantec Messaging Gateway Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31755 Exploited |
Not yet scored | Tenda AC11 Router Network & security devices |
Tenda AC11 Router Stack Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-10987 Exploited |
Not yet scored | Tenda AC1900 Router AC15 Model Network & security devices |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-14558 Exploited |
Not yet scored | Tenda AC7, AC9, and AC10 Routers Network & security devices |
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2019-19356 Exploited |
Not yet scored | Netis WF2419 Devices Network & security devices |
Netis WF2419 Devices Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-1350 Exploited |
Not yet scored | Microsoft Windows Network & security devices |
Microsoft Windows DNS Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-15505 Exploited |
Not yet scored | Ivanti MobileIron Multiple Products Network & security devices |
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-13379 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-12812 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 |
| CVE-2019-5591 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8515 Exploited |
Not yet scored | DrayTek Multiple Vigor Routers Network & security devices |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 3 Nov 2021 |
| CVE-2020-25506 Exploited |
Not yet scored | D-Link DNS-320 Device Network & security devices |
D-Link DNS-320 Device Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11634 Exploited |
Not yet scored | Citrix Workspace Application and Receiver for Windows Network & security devices |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.