Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 807new in the last 7 days
- 6added as actively exploited
- 57critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2011-4723 Exploited |
Not yet scored | D-Link DIR-300 Router Network & security devices |
D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability | 8 Sep 2022 |
| CVE-2018-2628 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 8 Sep 2022 |
| CVE-2018-13374 Exploited |
Not yet scored | Fortinet FortiOS and FortiADC Network & security devices |
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 8 Sep 2022 |
| CVE-2017-5521 Exploited |
Not yet scored | NETGEAR Multiple Devices Operating systems & software |
NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability | 8 Sep 2022 |
| CVE-2011-1823 Exploited |
Not yet scored | Android Android OS Operating systems & software |
Android OS Privilege Escalation Vulnerability | 8 Sep 2022 |
| CVE-2021-31010 Exploited |
Not yet scored | Apple iOS, macOS, watchOS Operating systems & software |
Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability | 25 Aug 2022 |
| CVE-2020-36193 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Improper Link Resolution Vulnerability | 25 Aug 2022 |
| CVE-2022-2294 Exploited |
Not yet scored | WebRTC WebRTC Applications & supply chain |
WebRTC Heap Buffer Overflow Vulnerability | 25 Aug 2022 |
| CVE-2020-28949 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 25 Aug 2022 |
| CVE-2022-24706 Exploited |
Not yet scored | Apache CouchDB Operating systems & software |
Apache CouchDB Insecure Default Initialization of Resource Vulnerability | 25 Aug 2022 |
| CVE-2022-22963 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Cloud & SaaS |
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 25 Aug 2022 |
| CVE-2021-38406 Exploited |
Not yet scored | Delta Electronics DOPSoft 2 Operating systems & software |
Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability | 25 Aug 2022 |
| CVE-2022-26352 Exploited |
Not yet scored | dotCMS dotCMS Applications & supply chain |
dotCMS Unrestricted Upload of File Vulnerability | 25 Aug 2022 |
| CVE-2022-24112 Exploited |
Not yet scored | Apache APISIX Operating systems & software |
Apache APISIX Authentication Bypass Vulnerability | 25 Aug 2022 |
| CVE-2021-39226 Exploited |
Not yet scored | Grafana Labs Grafana Operating systems & software |
Grafana Authentication Bypass Vulnerability | 25 Aug 2022 |
| CVE-2022-0028 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability | 22 Aug 2022 |
| CVE-2017-15944 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2022-32893 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2022-32894 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Out-of-Bounds Write Vulnerability | 18 Aug 2022 |
| CVE-2022-22536 Exploited |
Not yet scored | SAP Multiple Products Applications & supply chain |
SAP Multiple Products HTTP Request Smuggling Vulnerability | 18 Aug 2022 |
| CVE-2022-26923 Exploited |
Not yet scored | Microsoft Active Directory Identity & access |
Microsoft Active Directory Domain Services Privilege Escalation Vulnerability | 18 Aug 2022 |
| CVE-2022-21971 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Runtime Remote Code Execution Vulnerability | 18 Aug 2022 |
| CVE-2022-2856 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Insufficient Input Validation Vulnerability | 18 Aug 2022 |
| CVE-2022-27925 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 11 Aug 2022 |
| CVE-2022-37042 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability | 11 Aug 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.