Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1782new in the last 7 days
- 4added as actively exploited
- 139critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2010-4344 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Heap-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2018-8373 Exploited |
Not yet scored | Microsoft Internet Explorer Scripting Engine Operating systems & software |
Microsoft Scripting Engine Memory Corruption Vulnerability | 25 Mar 2022 |
| CVE-2022-26143 Exploited |
Not yet scored | Mitel MiCollab, MiVoice Business Express Operating systems & software |
MiCollab, MiVoice Business Express Access Control Vulnerability | 25 Mar 2022 |
| CVE-2022-21999 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2018-1273 Exploited |
Not yet scored | VMware Tanzu Spring Data Commons Operating systems & software |
VMware Tanzu Spring Data Commons Property Binder Vulnerability | 25 Mar 2022 |
| CVE-2018-6961 Exploited |
Not yet scored | VMware SD-WAN Edge Operating systems & software |
VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-7892 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 25 Mar 2022 |
| CVE-2014-0130 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-1555 Exploited |
Not yet scored | NETGEAR Wireless Access Point (WAP) Devices Operating systems & software |
NETGEAR Multiple WAP Devices Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-4068 Exploited |
Not yet scored | Arcserve Unified Data Protection (UDP) Operating systems & software |
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2018-8120 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1253 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-0543 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1405 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2016-3309 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2015-2546 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Memory Corruption Vulnerability | 15 Mar 2022 |
| CVE-2019-1132 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1315 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1129 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1069 Exploited |
Not yet scored | Microsoft Task Scheduler Operating systems & software |
Microsoft Task Scheduler Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1322 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-1064 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
| CVE-2019-0841 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability | 15 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.