Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 2860new in the last 7 days
- 3added as actively exploited
- 214critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-1782 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-14882 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8644 Exploited |
Not yet scored | PlaySMS PlaySMS Operating systems & software |
PlaySMS Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-0601 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows CryptoAPI Spoofing Vulnerability | 3 Nov 2021 |
| CVE-2020-14883 Exploited |
Not yet scored | Oracle WebLogic Server Operating systems & software |
Oracle WebLogic Server Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-30713 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2020-9819 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-8243 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-6223 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Group Facetime Vulnerability | 3 Nov 2021 |
| CVE-2019-18187 Exploited |
Not yet scored | Trend Micro OfficeScan Operating systems & software |
Trend Micro OfficeScan Directory Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-16009 Exploited |
Not yet scored | Google Chromium V8 Operating systems & software |
Google Chromium V8 Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2020-0674 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-2555 Exploited |
Not yet scored | Oracle Multiple Products Network & security devices |
Oracle Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22893 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30858 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-17558 Exploited |
Not yet scored | Apache Solr Operating systems & software |
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-4437 Exploited |
Not yet scored | Apache Shiro Operating systems & software |
Apache Shiro Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-2215 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2017-5638 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0211 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-17530 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0541 Exploited |
Not yet scored | Microsoft MSHTML Operating systems & software |
Microsoft MSHTML Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-24557 Exploited |
Not yet scored | Trend Micro Apex One, OfficeScan, and Worry-Free Business Security Operating systems & software |
Trend Micro Multiple Products Improper Access Control Vulnerability | 3 Nov 2021 |
| CVE-2021-20021 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-1906 Exploited |
Not yet scored | Qualcomm Multiple Chipsets Hardware & firmware |
Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.