Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-44515 Exploited |
Not yet scored | Zoho Desktop Central Identity & access |
Zoho Desktop Central Authentication Bypass Vulnerability | 10 Dec 2021 |
| CVE-2017-12149 Exploited |
Not yet scored | Red Hat JBoss Application Server Operating systems & software |
Red Hat JBoss Application Server Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2019-10758 Exploited |
Not yet scored | MongoDB mongo-express Operating systems & software |
MongoDB mongo-express Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2020-8816 Exploited |
Not yet scored | Pi-hole AdminLTE Operating systems & software |
Pi-Hole AdminLTE Remote Code Execution Vulnerability | 10 Dec 2021 |
| CVE-2020-17463 Exploited |
Not yet scored | Fuel CMS Fuel CMS Applications & supply chain |
Fuel CMS SQL Injection Vulnerability | 10 Dec 2021 |
| CVE-2021-37415 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) Applications & supply chain |
Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability | 1 Dec 2021 |
| CVE-2021-40438 Exploited |
Not yet scored | Apache Apache Operating systems & software |
Apache HTTP Server-Side Request Forgery (SSRF) | 1 Dec 2021 |
| CVE-2018-14847 Exploited |
Not yet scored | MikroTik RouterOS Network & security devices |
MikroTik Router OS Directory Traversal Vulnerability | 1 Dec 2021 |
| CVE-2020-11261 Exploited |
Not yet scored | Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,… OT, ICS & IoT |
Qualcomm Multiple Chipsets Improper Input Validation Vulnerability | 1 Dec 2021 |
| CVE-2021-44077 Exploited |
Not yet scored | Zoho ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Operating systems & software |
Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability | 1 Dec 2021 |
| CVE-2021-40449 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Win32k Privilege Escalation Vulnerability | 17 Nov 2021 |
| CVE-2021-22204 Exploited |
Not yet scored | Perl Exiftool Operating systems & software |
ExifTool Remote Code Execution Vulnerability | 17 Nov 2021 |
| CVE-2021-42292 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Excel Security Feature Bypass | 17 Nov 2021 |
| CVE-2021-42321 Exploited |
Not yet scored | Microsoft Exchange Operating systems & software |
Microsoft Exchange Server Remote Code Execution Vulnerability | 17 Nov 2021 |
| CVE-2019-4716 Exploited |
Not yet scored | IBM Planning Analytics Operating systems & software |
IBM Planning Analytics Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-0938 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21193 Exploited |
Not yet scored | Google Chromium Blink Operating systems & software |
Google Chromium Blink Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-21220 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-18935 Exploited |
Not yet scored | Progress Telerik UI for ASP.NET AJAX Operating systems & software |
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-22506 Exploited |
Not yet scored | Micro Focus Micro Focus Access Manager Identity & access |
Micro Focus Access Manager Information Leakage Vulnerability | 3 Nov 2021 |
| CVE-2021-38647 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-15999 Exploited |
Not yet scored | Google Chrome FreeType Applications & supply chain |
Google Chrome FreeType Heap Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-17087 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2016-0167 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-22502 Exploited |
Not yet scored | Micro Focus Operation Bridge Reporter (OBR) Operating systems & software |
Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.