Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 886new in the last 7 days
- 6added as actively exploited
- 63critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-30663 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2018-7600 Exploited |
Not yet scored | Drupal Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-3398 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-26084 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-3396 Exploited |
Not yet scored | Atlassian Confluence Server and Data Server Operating systems & software |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-29557 Exploited |
Not yet scored | D-Link DIR-825 R1 Devices Operating systems & software |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2018-15811 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2018-18325 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2017-9822 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21166 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-16017 Exploited |
Not yet scored | Google Chrome Operating systems & software |
Google Chrome Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-8655 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Operating systems & software |
EyesOfNetwork Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-16010 Exploited |
Not yet scored | Google Chrome for Android UI Operating systems & software |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-37976 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-6418 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-30554 Exploited |
Not yet scored | Google Chromium WebGL Operating systems & software |
Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21206 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30551 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-38000 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-31956 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NTFS Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31201 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-30632 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-21148 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.