Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-34527 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Print Spooler Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31207 Exploited |
Not yet scored | Microsoft Exchange Server Operating systems & software |
Microsoft Exchange Server Security Feature Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-15752 Exploited |
Not yet scored | Docker Desktop Community Edition Cloud & SaaS |
Docker Desktop Community Edition Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2017-9822 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-18325 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2020-1020 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-15811 Exploited |
Not yet scored | DotNetNuke (DNN) DotNetNuke (DNN) Operating systems & software |
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability | 3 Nov 2021 |
| CVE-2017-7269 Exploited |
Not yet scored | Microsoft Internet Information Services (IIS) Operating systems & software |
Microsoft Windows Server Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-25506 Exploited |
Not yet scored | D-Link DNS-320 Device Network & security devices |
D-Link DNS-320 Device Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2012-0158 Exploited |
Not yet scored | Microsoft MSCOMCTL.OCX Operating systems & software |
Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-26411 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-29557 Exploited |
Not yet scored | D-Link DIR-825 R1 Devices Operating systems & software |
D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2017-8759 Exploited |
Not yet scored | Microsoft .NET Framework Operating systems & software |
Microsoft .NET Framework Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-8653 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2019-11634 Exploited |
Not yet scored | Citrix Workspace Application and Receiver for Windows Network & security devices |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0797 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-0859 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-36942 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2019-1215 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2018-0802 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2015-1641 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-27085 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-19781 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8196 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2021-40444 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.