Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-31199 Exploited |
Not yet scored | Netwrix Auditor Network & security devices |
Netwrix Auditor Insecure Object Deserialization Vulnerability | 11 Jul 2023 |
| CVE-2019-17621 Exploited |
Not yet scored | D-Link DIR-859 Router Network & security devices |
D-Link DIR-859 Router Command Execution Vulnerability | 29 Jun 2023 |
| CVE-2023-27997 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy SSL-VPN Network & security devices |
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 13 Jun 2023 |
| CVE-2023-33009 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-33010 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-28771 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 31 May 2023 |
| CVE-2023-2868 Exploited |
Not yet scored | Barracuda Networks Email Security Gateway (ESG) Appliance Network & security devices |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 26 May 2023 |
| CVE-2016-6415 Exploited |
Not yet scored | Cisco IOS, IOS XR, and IOS XE Network & security devices |
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 19 May 2023 |
| CVE-2004-1464 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Denial-of-Service Vulnerability | 19 May 2023 |
| CVE-2017-6742 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 19 Apr 2023 |
| CVE-2022-41328 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Path Traversal Vulnerability | 14 Mar 2023 |
| CVE-2022-40765 Exploited |
Not yet scored | Mitel MiVoice Connect Network & security devices |
Mitel MiVoice Connect Command Injection Vulnerability | 21 Feb 2023 |
| CVE-2022-42475 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 13 Dec 2022 |
| CVE-2020-3433 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability | 24 Oct 2022 |
| CVE-2020-3153 Exploited |
Not yet scored | Cisco AnyConnect Secure Network & security devices |
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability | 24 Oct 2022 |
| CVE-2022-40684 Exploited |
Not yet scored | Fortinet Multiple Products Network & security devices |
Fortinet Multiple Products Authentication Bypass Vulnerability | 11 Oct 2022 |
| CVE-2022-3236 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Code Injection Vulnerability | 23 Sep 2022 |
| CVE-2018-6530 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers OS Command Injection Vulnerability | 8 Sep 2022 |
| CVE-2018-7445 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability | 8 Sep 2022 |
| CVE-2018-13374 Exploited |
Not yet scored | Fortinet FortiOS and FortiADC Network & security devices |
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 8 Sep 2022 |
| CVE-2011-4723 Exploited |
Not yet scored | D-Link DIR-300 Router Network & security devices |
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 8 Sep 2022 |
| CVE-2022-0028 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 22 Aug 2022 |
| CVE-2017-15944 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2019-15271 Exploited |
Not yet scored | Cisco RV Series Routers Network & security devices |
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability | 8 Jun 2022 |
| CVE-2016-6366 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | 24 May 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.