Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2019-2725 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server, Injection | 10 Jan 2022 |
| CVE-2019-9670 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Operating systems & software |
Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference | 10 Jan 2022 |
| CVE-2018-13382 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy Network & security devices |
Fortinet FortiOS and FortiProxy Improper Authorization | 10 Jan 2022 |
| CVE-2018-13383 Exploited |
Not yet scored | Fortinet FortiOS and FortiProxy Network & security devices |
Fortinet FortiOS and FortiProxy Out-of-bounds Write | 10 Jan 2022 |
| CVE-2019-1579 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Network & security devices |
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability | 10 Jan 2022 |
| CVE-2017-1000486 Exploited |
Not yet scored | Primetek Primefaces Application Operating systems & software |
Primetek Primefaces Remote Code Execution Vulnerability | 10 Jan 2022 |
| CVE-2019-10149 Exploited |
Not yet scored | Exim Mail Transfer Agent (MTA) Operating systems & software |
Exim Mail Transfer Agent (MTA) Improper Input Validation | 10 Jan 2022 |
| CVE-2019-7609 Exploited |
Not yet scored | Elastic Kibana Operating systems & software |
Kibana Arbitrary Code Execution | 10 Jan 2022 |
| CVE-2015-7450 Exploited |
Not yet scored | IBM WebSphere Application Server and Server Hypervisor Edition Operating systems & software |
IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | 10 Jan 2022 |
| CVE-2021-27860 Exploited |
Not yet scored | FatPipe WARP, IPVPN, and MPVPN software Operating systems & software |
FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit | 10 Jan 2022 |
| CVE-2019-1458 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 10 Jan 2022 |
| CVE-2013-3900 Exploited |
Not yet scored | Microsoft WinVerifyTrust function Operating systems & software |
Microsoft WinVerifyTrust function Remote Code Execution | 10 Jan 2022 |
| CVE-2020-6572 Exploited |
Not yet scored | Google Chrome Media Operating systems & software |
Google Chrome Media Use-After-Free Vulnerability | 10 Jan 2022 |
| CVE-2021-36260 Exploited |
Not yet scored | Hikvision Security cameras web server Operating systems & software |
Hikvision Improper Input Validation | 10 Jan 2022 |
| CVE-2021-22017 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Access Control | 10 Jan 2022 |
| CVE-2021-43890 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows AppX Installer Spoofing Vulnerability | 15 Dec 2021 |
| CVE-2021-4102 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Use-After-Free Vulnerability | 15 Dec 2021 |
| CVE-2021-44228 Exploited |
Not yet scored | Apache Log4j2 Applications & supply chain |
Apache Log4j2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2010-1871 Exploited |
Not yet scored | Red Hat JBoss Seam 2 Applications & supply chain |
Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2017-17562 Exploited |
Not yet scored | Embedthis GoAhead Operating systems & software |
Embedthis GoAhead Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2021-44168 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Arbitrary File Download | 10 Dec 2021 |
| CVE-2019-0193 Exploited |
Not yet scored | Apache Solr Operating systems & software |
Apache Solr DataImportHandler Code Injection Vulnerability | 10 Dec 2021 |
| CVE-2019-7238 Exploited |
Not yet scored | Sonatype Nexus Repository Manager Operating systems & software |
Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability | 10 Dec 2021 |
| CVE-2021-35394 Exploited |
Not yet scored | Realtek Jungle Software Development Kit (SDK) Operating systems & software |
Realtek Jungle SDK Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2019-13272 Exploited |
Not yet scored | Linux Kernel Operating systems & software |
Linux Kernel Improper Privilege Management Vulnerability | 10 Dec 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.