Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1225new in the last 7 days
- 5added as actively exploited
- 75critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-22894 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2012-3152 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-14871 Exploited |
Not yet scored | Oracle Solaris and Zettabyte File System (ZFS) Operating systems & software |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2016-9563 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver XML External Entity (XXE) Vulnerability | 3 Nov 2021 |
| CVE-2018-2380 Exploited |
Not yet scored | SAP Customer Relationship Management (CRM) Operating systems & software |
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-6287 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
| CVE-2020-6207 Exploited |
Not yet scored | SAP Solution Manager Operating systems & software |
SAP Solution Manager Missing Authentication for Critical Function Vulnerability | 3 Nov 2021 |
| CVE-2016-3976 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2019-16256 Exploited |
Not yet scored | SIMalliance Toolbox Browser Operating systems & software |
SIMalliance Toolbox Browser Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10148 Exploited |
Not yet scored | SolarWinds Orion Applications & supply chain |
SolarWinds Orion Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-35211 Exploited |
Not yet scored | SolarWinds Serv-U Operating systems & software |
SolarWinds Serv-U Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1905 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-10221 Exploited |
Not yet scored | rConfig rConfig Applications & supply chain |
rConfig OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-35395 Exploited |
Not yet scored | Realtek AP-Router SDK Network & security devices |
Realtek AP-Router SDK Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2017-16651 Exploited |
Not yet scored | Roundcube Roundcube Webmail Applications & supply chain |
Roundcube Webmail File Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-11652 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-11651 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Authentication Bypass Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.