Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-11510 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 3 Nov 2021 |
| CVE-2019-11539 Exploited |
Not yet scored | Ivanti Pulse Connect Secure and Pulse Policy Secure Network & security devices |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-35395 Exploited |
Not yet scored | Realtek AP-Router SDK Network & security devices |
Realtek AP-Router SDK Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2019-7481 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-20022 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Unrestricted Upload of File Vulnerability | 3 Nov 2021 |
| CVE-2021-20023 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Path Traversal Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.