Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-8193 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-8195 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8196 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2019-19781 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-16010 Exploited |
Not yet scored | Google Chrome for Android UI Operating systems & software |
Google Chrome for Android UI Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-21166 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-16017 Exploited |
Not yet scored | Google Chrome Operating systems & software |
Google Chrome Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-37976 Exploited |
Not yet scored | Google Chromium Operating systems & software |
Google Chromium Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8657 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Applications & supply chain |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22986 Exploited |
Not yet scored | F5 BIG-IP and BIG-IQ Centralized Management Identity & access |
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-5591 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 |
| CVE-2020-12812 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 |
| CVE-2018-13379 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-15999 Exploited |
Not yet scored | Google Chrome FreeType Applications & supply chain |
Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-8655 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Operating systems & software |
EyesOfNetwork Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-30554 Exploited |
Not yet scored | Google Chromium WebGL Operating systems & software |
Google Chromium WebGL Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21206 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-38000 Exploited |
Not yet scored | Google Chromium Intents Operating systems & software |
Google Chromium Intents Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-37975 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-31956 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows NTFS Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-31201 Exploited |
Not yet scored | Microsoft Enhanced Cryptographic Provider Operating systems & software |
Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-30632 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-21148 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-37973 Exploited |
Not yet scored | Google Chromium Portals Operating systems & software |
Google Chromium Portals Use-After-Free Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.