Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 832new in the last 7 days
- 6added as actively exploited
- 59critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-22017 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Access Control | 10 Jan 2022 |
| CVE-2021-36260 Exploited |
Not yet scored | Hikvision Security cameras web server Operating systems & software |
Hikvision Improper Input Validation | 10 Jan 2022 |
| CVE-2020-6572 Exploited |
Not yet scored | Google Chrome Media Operating systems & software |
Google Chrome Media Use-After-Free Vulnerability | 10 Jan 2022 |
| CVE-2019-1458 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 10 Jan 2022 |
| CVE-2013-3900 Exploited |
Not yet scored | Microsoft WinVerifyTrust function Operating systems & software |
Microsoft WinVerifyTrust function Remote Code Execution | 10 Jan 2022 |
| CVE-2019-2725 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server, Injection | 10 Jan 2022 |
| CVE-2019-9670 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 10 Jan 2022 |
| CVE-2021-27860 Exploited |
Not yet scored | FatPipe WARP, IPVPN, and MPVPN software Operating systems & software |
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | 10 Jan 2022 |
| CVE-2019-10149 Exploited |
Not yet scored | Exim Mail Transfer Agent (MTA) Operating systems & software |
Exim Mail Transfer Agent (MTA) Improper Input Validation | 10 Jan 2022 |
| CVE-2017-1000486 Exploited |
Not yet scored | Primetek Primefaces Application Operating systems & software |
Primetek Primefaces Remote Code Execution Vulnerability | 10 Jan 2022 |
| CVE-2019-7609 Exploited |
Not yet scored | Elastic Kibana Operating systems & software |
Kibana Arbitrary Code Execution | 10 Jan 2022 |
| CVE-2021-4102 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Use-After-Free Vulnerability | 15 Dec 2021 |
| CVE-2021-43890 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Installer Spoofing Vulnerability | 15 Dec 2021 |
| CVE-2020-8816 Exploited |
Not yet scored | Pi-hole AdminLTE Operating systems & software |
Pi-Hole AdminLTE Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2019-10758 Exploited |
Not yet scored | MongoDB mongo-express Operating systems & software |
MongoDB mongo-express Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2017-17562 Exploited |
Not yet scored | Embedthis GoAhead Operating systems & software |
Embedthis GoAhead Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2019-0193 Exploited |
Not yet scored | Apache Solr Operating systems & software |
Apache Solr DataImportHandler Code Injection Vulnerability | 10 Dec 2021 |
| CVE-2019-7238 Exploited |
Not yet scored | Sonatype Nexus Repository Manager Operating systems & software |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | 10 Dec 2021 |
| CVE-2021-35394 Exploited |
Not yet scored | Realtek Jungle Software Development Kit (SDK) Operating systems & software |
Realtek Jungle SDK Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2019-13272 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Privilege Management Vulnerability | 10 Dec 2021 |
| CVE-2017-12149 Exploited |
Not yet scored | Red Hat JBoss Application Server Operating systems & software |
Red Hat JBoss Application Server Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2021-40438 Exploited |
Not yet scored | Apache Apache Operating systems & software |
Apache HTTP Server-Side Request Forgery (SSRF) | 1 Dec 2021 |
| CVE-2021-44077 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Operating systems & software |
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | 1 Dec 2021 |
| CVE-2021-42292 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Excel Security Feature Bypass | 17 Nov 2021 |
| CVE-2021-42321 Exploited |
Not yet scored | Microsoft Exchange Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 17 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.