Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 460new in the last 7 days
- 8added as actively exploited
- 40critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-47565 Exploited |
Not yet scored | QNAP VioStor NVR Operating systems & software |
QNAP VioStor NVR OS Command Injection Vulnerability | 21 Dec 2023 |
| CVE-2023-49897 Exploited |
Not yet scored | FXC AE1021, AE1021PE Operating systems & software |
FXC AE1021, AE1021PE OS Command Injection Vulnerability | 21 Dec 2023 |
| CVE-2023-41266 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense Path Traversal Vulnerability | 7 Dec 2023 |
| CVE-2023-41265 Exploited |
Not yet scored | Qlik Sense Operating systems & software |
Qlik Sense HTTP Tunneling Vulnerability | 7 Dec 2023 |
| CVE-2023-42916 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 4 Dec 2023 |
| CVE-2023-42917 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Memory Corruption Vulnerability | 4 Dec 2023 |
| CVE-2023-6345 Exploited |
Not yet scored | Google Chromium Skia Operating systems & software |
Google Skia Integer Overflow Vulnerability | 30 Nov 2023 |
| CVE-2023-1671 Exploited |
Not yet scored | Sophos Web Appliance Operating systems & software |
Sophos Web Appliance Command Injection Vulnerability | 16 Nov 2023 |
| CVE-2020-2551 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 16 Nov 2023 |
| CVE-2023-36584 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 16 Nov 2023 |
| CVE-2023-36025 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 14 Nov 2023 |
| CVE-2023-47246 Exploited |
Not yet scored | SysAid SysAid Server Operating systems & software |
SysAid Server Path Traversal Vulnerability | 13 Nov 2023 |
| CVE-2023-29552 Exploited |
Not yet scored | IETF Service Location Protocol (SLP) Operating systems & software |
Service Location Protocol (SLP) Denial-of-Service Vulnerability | 8 Nov 2023 |
| CVE-2023-22518 Exploited |
Not yet scored | Atlassian Confluence Data Center and Server Operating systems & software |
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 7 Nov 2023 |
| CVE-2023-46604 Exploited |
Not yet scored | Apache ActiveMQ Operating systems & software |
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 2 Nov 2023 |
| CVE-2023-41763 Exploited |
Not yet scored | Microsoft Skype for Business Operating systems & software |
Microsoft Skype for Business Privilege Escalation Vulnerability | 10 Oct 2023 |
| CVE-2023-36563 Exploited |
Not yet scored | Microsoft WordPad Operating systems & software |
Microsoft WordPad Information Disclosure Vulnerability | 10 Oct 2023 |
| CVE-2023-21608 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 10 Oct 2023 |
| CVE-2023-42824 Exploited |
Not yet scored | Apple iOS and iPadOS Operating systems & software |
Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability | 5 Oct 2023 |
| CVE-2023-40044 Exploited |
Not yet scored | Progress WS_FTP Server Operating systems & software |
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability | 5 Oct 2023 |
| CVE-2023-22515 Exploited |
Not yet scored | Atlassian Confluence Data Center and Server Operating systems & software |
Atlassian Confluence Data Center and Server Broken Access Control Vulnerability | 5 Oct 2023 |
| CVE-2023-28229 Exploited |
Not yet scored | Microsoft Windows CNG Key Isolation Service Operating systems & software |
Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability | 4 Oct 2023 |
| CVE-2023-42793 Exploited |
Not yet scored | JetBrains TeamCity Operating systems & software |
JetBrains TeamCity Authentication Bypass Vulnerability | 4 Oct 2023 |
| CVE-2023-5217 Exploited |
Not yet scored | Google Chromium libvpx Operating systems & software |
Google Chromium libvpx Heap Buffer Overflow Vulnerability | 2 Oct 2023 |
| CVE-2023-41991 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Improper Certificate Validation Vulnerability | 25 Sep 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.