Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-6819 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-6820 Exploited |
Not yet scored | Mozilla Firefox and Thunderbird Operating systems & software |
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-15949 Exploited |
Not yet scored | Nagios Nagios XI Applications & supply chain |
Nagios XI Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-26919 Exploited |
Not yet scored | NETGEAR JGS516PE Devices Operating systems & software |
Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability | 3 Nov 2021 |
| CVE-2020-0646 Exploited |
Not yet scored | Microsoft .NET Framework Operating systems & software |
Microsoft .NET Framework Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0808 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2019-1214 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-27103 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2020-3452 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2019-3396 Exploited |
Not yet scored | Atlassian Confluence Server and Data Server Operating systems & software |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2012-3152 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-14871 Exploited |
Not yet scored | Oracle Solaris and Zettabyte File System (ZFS) Operating systems & software |
Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-14750 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22899 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11539 Exploited |
Not yet scored | Ivanti Pulse Connect Secure and Pulse Policy Secure Network & security devices |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-4939 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2021-22894 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-8260 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-11510 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 3 Nov 2021 |
| CVE-2015-4852 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2020-11651 Exploited |
Not yet scored | SaltStack Salt Operating systems & software |
SaltStack Salt Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-10221 Exploited |
Not yet scored | rConfig rConfig Applications & supply chain |
rConfig OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-16846 Exploited |
Not yet scored | SaltStack Salt Applications & supply chain |
SaltStack Salt Shell Injection Vulnerability | 3 Nov 2021 |
| CVE-2018-2380 Exploited |
Not yet scored | SAP Customer Relationship Management (CRM) Operating systems & software |
SAP Customer Relationship Management (CRM) Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2010-5326 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.