Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-36742 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-17496 Exploited |
Not yet scored | vBulletin vBulletin Cloud & SaaS |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-16759 Exploited |
Not yet scored | vBulletin vBulletin Applications & supply chain |
vBulletin PHP Module Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-5544 Exploited |
Not yet scored | VMware VMware ESXi and Horizon DaaS Operating systems & software |
VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-5849 Exploited |
Not yet scored | Unraid Unraid Operating systems & software |
Unraid Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-3992 Exploited |
Not yet scored | VMware ESXi Operating systems & software |
VMware ESXi OpenSLP Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-8467 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-7600 Exploited |
Not yet scored | Drupal Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8468 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan and Worry-Free Business Security Agents Operating systems & software |
Trend Micro Multiple Products Content Validation Escape Vulnerability | 3 Nov 2021 |
| CVE-2020-8599 Exploited |
Not yet scored | Trend Micro Apex One and OfficeScan Operating systems & software |
Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2021-36741 Exploited |
Not yet scored | Trend Micro Apex One, Apex One as a Service, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2020-10189 Exploited |
Not yet scored | Zoho ManageEngine Identity & access |
Zoho ManageEngine Desktop Central File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2020-4006 Exploited |
Not yet scored | VMware Multiple Products Identity & access |
Multiple VMware Products Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-22005 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-25213 Exploited |
Not yet scored | WordPress File Manager Plugin Applications & supply chain |
WordPress File Manager Plugin Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-27561 Exploited |
Not yet scored | Yealink Device Management Operating systems & software |
Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability | 3 Nov 2021 |
| CVE-2021-40539 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability | 3 Nov 2021 |
| CVE-2020-11738 Exploited |
Not yet scored | WordPress Snap Creek Duplicator Plugin Applications & supply chain |
WordPress Snap Creek Duplicator Plugin File Download Vulnerability | 3 Nov 2021 |
| CVE-2019-8394 Exploited |
Not yet scored | Zoho ManageEngine Operating systems & software |
Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-3569 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2021-21972 Exploited |
Not yet scored | VMware vCenter Server Applications & supply chain |
VMware vCenter Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-21985 Exploited |
Not yet scored | VMware vCenter Server Operating systems & software |
VMware vCenter Server Improper Input Validation Vulnerability | 3 Nov 2021 |
| CVE-2019-9978 Exploited |
Not yet scored | WordPress Social Warfare Plugin Applications & supply chain |
WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-3566 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.