Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-30860 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30633 Exploited |
Not yet scored | Google Chromium Indexed DB API Applications & supply chain |
Google Chromium Indexed DB API Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-7961 Exploited |
Not yet scored | Liferay Liferay Portal Operating systems & software |
Liferay Portal Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2019-0604 Exploited |
Not yet scored | Microsoft SharePoint Applications & supply chain |
Microsoft SharePoint Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-12271 Exploited |
Not yet scored | Sophos SFOS Identity & access |
Sophos SFOS SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-22900 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-3161 Exploited |
Not yet scored | Cisco Cisco IP Phones Network & security devices |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2021-30657 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-30666 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-27930 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-8657 Exploited |
Not yet scored | EyesOfNetwork EyesOfNetwork Applications & supply chain |
EyesOfNetwork Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2021-30661 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-1147 Exploited |
Not yet scored | Microsoft .NET Framework, SharePoint, Visual Studio Operating systems & software |
Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-42013 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2018-11776 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-9082 Exploited |
Not yet scored | ThinkPHP ThinkPHP Operating systems & software |
ThinkPHP Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30632 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2021-28310 Exploited |
Not yet scored | Microsoft Win32k Operating systems & software |
Microsoft Win32k Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-1350 Exploited |
Not yet scored | Microsoft Windows Network & security devices |
Microsoft Windows DNS Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1879 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Applications & supply chain |
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2021-41773 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-1871 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-23874 Exploited |
Not yet scored | McAfee McAfee Total Protection (MTP) Operating systems & software |
McAfee Total Protection (MTP) Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.