Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1225new in the last 7 days
- 5added as actively exploited
- 75critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-8644 Exploited |
Not yet scored | PlaySMS PlaySMS Operating systems & software |
PlaySMS Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-4878 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-5735 Exploited |
Not yet scored | Amcrest Cameras and Network Video Recorder (NVR) Operating systems & software |
Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30860 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30633 Exploited |
Not yet scored | Google Chromium Indexed DB API Applications & supply chain |
Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-7961 Exploited |
Not yet scored | Liferay Liferay Portal Operating systems & software |
Liferay Portal Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2019-0604 Exploited |
Not yet scored | Microsoft SharePoint Applications & supply chain |
Microsoft SharePoint Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-12271 Exploited |
Not yet scored | Sophos SFOS Identity & access |
Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-4430 Exploited |
Not yet scored | IBM Data Risk Manager Operating systems & software |
IBM Data Risk Manager Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-4428 Exploited |
Not yet scored | IBM Data Risk Manager Operating systems & software |
IBM Data Risk Manager Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-4716 Exploited |
Not yet scored | IBM Planning Analytics Operating systems & software |
IBM Planning Analytics Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31979 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-21220 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2021-30563 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-4427 Exploited |
Not yet scored | IBM Data Risk Manager Identity & access |
IBM Data Risk Manager Security Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-21224 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-21193 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2016-3715 Exploited |
Not yet scored | ImageMagick ImageMagick Operating systems & software |
ImageMagick Arbitrary File Deletion Vulnerability | 3 Nov 2021 |
| CVE-2021-1647 Exploited |
Not yet scored | Microsoft Defender Operating systems & software |
Microsoft Defender Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-33739 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-0878 Exploited |
Not yet scored | Microsoft Edge and Internet Explorer Operating systems & software |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-23874 Exploited |
Not yet scored | McAfee McAfee Total Protection (MTP) Operating systems & software |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2016-0185 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Media Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0683 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.