Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2017-6884 Exploited |
Not yet scored | Zyxel EMG2926 Routers Network & security devices |
Zyxel EMG2926 Routers Command Injection Vulnerability | 18 Sep 2023 |
| CVE-2023-20269 Exploited |
Not yet scored | Cisco Adaptive Security Appliance and Firepower Threat Defense Network & security devices |
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 13 Sep 2023 |
| CVE-2023-38035 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry Authentication Bypass Vulnerability | 22 Aug 2023 |
| CVE-2023-24489 Exploited |
Not yet scored | Citrix Content Collaboration Network & security devices |
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 16 Aug 2023 |
| CVE-2017-18368 Exploited |
Not yet scored | Zyxel P660HN-T1A Routers Network & security devices |
Zyxel P660HN-T1A Routers Command Injection Vulnerability | 7 Aug 2023 |
| CVE-2023-35081 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 31 Jul 2023 |
| CVE-2023-35078 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 25 Jul 2023 |
| CVE-2023-3519 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 19 Jul 2023 |
| CVE-2022-31199 Exploited |
Not yet scored | Netwrix Auditor Network & security devices |
Netwrix Auditor Insecure Object Deserialization Vulnerability | 11 Jul 2023 |
| CVE-2019-17621 Exploited |
Not yet scored | D-Link DIR-859 Router Network & security devices |
D-Link DIR-859 Router Command Execution Vulnerability | 29 Jun 2023 |
| CVE-2023-27997 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy SSL-VPN Network & security devices |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 13 Jun 2023 |
| CVE-2023-33010 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-33009 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-28771 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 31 May 2023 |
| CVE-2023-2868 Exploited |
Not yet scored | Barracuda Networks Email Security Gateway (ESG) Appliance Network & security devices |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 26 May 2023 |
| CVE-2004-1464 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Denial-of-Service Vulnerability | 19 May 2023 |
| CVE-2016-6415 Exploited |
Not yet scored | Cisco IOS, IOS XR, and IOS XE Network & security devices |
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 19 May 2023 |
| CVE-2017-6742 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 19 Apr 2023 |
| CVE-2022-41328 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Path Traversal Vulnerability | 14 Mar 2023 |
| CVE-2022-40765 Exploited |
Not yet scored | Mitel MiVoice Connect Network & security devices |
Mitel MiVoice Connect Command Injection Vulnerability | 21 Feb 2023 |
| CVE-2022-42475 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 13 Dec 2022 |
| CVE-2020-3153 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 24 Oct 2022 |
| CVE-2020-3433 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 24 Oct 2022 |
| CVE-2022-40684 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Authentication Bypass Vulnerability | 11 Oct 2022 |
| CVE-2022-3236 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Code Injection Vulnerability | 23 Sep 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.