Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-3580 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2018-0171 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3118 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 3 Nov 2021 |
| CVE-2020-3566 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2020-3569 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2018-7600 Exploited |
Not yet scored | Drupal Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-3398 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-26084 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11580 Exploited |
Not yet scored | Atlassian Crowd and Crowd Data Center Applications & supply chain |
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-3396 Exploited |
Not yet scored | Atlassian Confluence Server and Data Server Operating systems & software |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-42258 Exploited |
Not yet scored | BQE BillQuick Web Suite Applications & supply chain |
BQE BillQuick Web Suite SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-3452 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-1497 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11634 Exploited |
Not yet scored | Citrix Workspace Application and Receiver for Windows Network & security devices |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-29557 Exploited |
Not yet scored | D-Link DIR-825 R1 Devices Operating systems & software |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-25506 Exploited |
Not yet scored | D-Link DNS-320 Device Network & security devices |
D-Link DNS-320 Device Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-15811 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2018-18325 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2017-9822 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-15752 Exploited |
Not yet scored | Docker Desktop Community Edition Cloud & SaaS |
Docker Desktop Community Edition Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-8515 Exploited |
Not yet scored | DrayTek Multiple Vigor Routers Network & security devices |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 3 Nov 2021 |
| CVE-2020-3161 Exploited |
Not yet scored | Cisco Cisco IP Phones Network & security devices |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2019-1653 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Routers Network & security devices |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2018-0296 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2019-13608 Exploited |
Not yet scored | Citrix StoreFront Server Network & security devices |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.