Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 807new in the last 7 days
- 6added as actively exploited
- 57critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-33009 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls Buffer Overflow Vulnerability | 5 Jun 2023 |
| CVE-2023-34362 Exploited |
Not yet scored | Progress MOVEit Transfer Cloud & SaaS |
Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 |
| CVE-2023-28771 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 31 May 2023 |
| CVE-2023-2868 Exploited |
Not yet scored | Barracuda Networks Email Security Gateway (ESG) Appliance Network & security devices |
Barracuda Networks ESG Appliance Improper Input Validation Vulnerability | 26 May 2023 |
| CVE-2023-32409 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Sandbox Escape Vulnerability | 22 May 2023 |
| CVE-2023-32373 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Use-After-Free Vulnerability | 22 May 2023 |
| CVE-2023-28204 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability | 22 May 2023 |
| CVE-2023-21492 Exploited |
Not yet scored | Samsung Mobile Devices Operating systems & software |
Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability | 19 May 2023 |
| CVE-2004-1464 Exploited |
Not yet scored | Cisco IOS Network & security devices |
Cisco IOS Denial-of-Service Vulnerability | 19 May 2023 |
| CVE-2016-6415 Exploited |
Not yet scored | Cisco IOS, IOS XR, and IOS XE Network & security devices |
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability | 19 May 2023 |
| CVE-2016-8735 Exploited |
Not yet scored | Apache Tomcat Applications & supply chain |
Apache Tomcat Remote Code Execution Vulnerability | 12 May 2023 |
| CVE-2023-25717 Exploited |
Not yet scored | Ruckus Wireless Multiple Products Operating systems & software |
Multiple Ruckus Wireless Products CSRF and RCE Vulnerability | 12 May 2023 |
| CVE-2015-5317 Exploited |
Not yet scored | Jenkins Jenkins User Interface (UI) Operating systems & software |
Jenkins User Interface (UI) Information Disclosure Vulnerability | 12 May 2023 |
| CVE-2010-3904 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Input Validation Vulnerability | 12 May 2023 |
| CVE-2014-0196 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Race Condition Vulnerability | 12 May 2023 |
| CVE-2021-3560 Exploited |
Not yet scored | Red Hat Polkit Operating systems & software |
Red Hat Polkit Incorrect Authorization Vulnerability | 12 May 2023 |
| CVE-2016-3427 Exploited |
Not yet scored | Oracle Java SE and JRockit Applications & supply chain |
Oracle Java SE and JRockit Unspecified Vulnerability | 12 May 2023 |
| CVE-2023-29336 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32K Privilege Escalation Vulnerability | 9 May 2023 |
| CVE-2021-45046 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Deserialization of Untrusted Data Vulnerability | 1 May 2023 |
| CVE-2023-21839 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 1 May 2023 |
| CVE-2023-1389 Exploited |
Not yet scored | TP-Link Archer AX21 Operating systems & software |
TP-Link Archer AX-21 Command Injection Vulnerability | 1 May 2023 |
| CVE-2023-2136 Exploited |
Not yet scored | Google Chromium Skia Operating systems & software |
Google Chrome Skia Integer Overflow Vulnerability | 21 Apr 2023 |
| CVE-2023-27350 Exploited |
Not yet scored | PaperCut MF/NG Operating systems & software |
PaperCut MF/NG Improper Access Control Vulnerability | 21 Apr 2023 |
| CVE-2023-28432 Exploited |
Not yet scored | MinIO MinIO Operating systems & software |
MinIO Information Disclosure Vulnerability | 21 Apr 2023 |
| CVE-2017-6742 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 19 Apr 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.