Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 807new in the last 7 days
- 6added as actively exploited
- 57critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-36584 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability | 16 Nov 2023 |
| CVE-2023-1671 Exploited |
Not yet scored | Sophos Web Appliance Operating systems & software |
Sophos Web Appliance Command Injection Vulnerability | 16 Nov 2023 |
| CVE-2023-36033 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-36036 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-36025 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows SmartScreen Security Feature Bypass Vulnerability | 14 Nov 2023 |
| CVE-2023-36851 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36844 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-47246 Exploited |
Not yet scored | SysAid SysAid Server Operating systems & software |
SysAid Server Path Traversal Vulnerability | 13 Nov 2023 |
| CVE-2023-36847 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36846 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36845 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-29552 Exploited |
Not yet scored | IETF Service Location Protocol (SLP) Operating systems & software |
Service Location Protocol (SLP) Denial-of-Service Vulnerability | 8 Nov 2023 |
| CVE-2023-22518 Exploited |
Not yet scored | Atlassian Confluence Data Center and Server Operating systems & software |
Atlassian Confluence Data Center and Server Improper Authorization Vulnerability | 7 Nov 2023 |
| CVE-2023-46604 Exploited |
Not yet scored | Apache ActiveMQ Operating systems & software |
Apache ActiveMQ Deserialization of Untrusted Data Vulnerability | 2 Nov 2023 |
| CVE-2023-46748 Exploited |
Not yet scored | F5 BIG-IP Configuration Utility Network & security devices |
F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 31 Oct 2023 |
| CVE-2023-46747 Exploited |
Not yet scored | F5 BIG-IP Configuration Utility Network & security devices |
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | 31 Oct 2023 |
| CVE-2023-5631 Exploited |
Not yet scored | Roundcube Webmail Applications & supply chain |
Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability | 26 Oct 2023 |
| CVE-2023-20273 Exploited |
Not yet scored | Cisco Cisco IOS XE Web UI Network & security devices |
Cisco IOS XE Web UI Command Injection Vulnerability | 23 Oct 2023 |
| CVE-2023-4966 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 18 Oct 2023 |
| CVE-2023-20198 Exploited |
Not yet scored | Cisco IOS XE Web UI Network & security devices |
Cisco IOS XE Web UI Privilege Escalation Vulnerability | 16 Oct 2023 |
| CVE-2023-36563 Exploited |
Not yet scored | Microsoft WordPad Operating systems & software |
Microsoft WordPad Information Disclosure Vulnerability | 10 Oct 2023 |
| CVE-2023-21608 Exploited |
Not yet scored | Adobe Acrobat and Reader Operating systems & software |
Adobe Acrobat and Reader Use-After-Free Vulnerability | 10 Oct 2023 |
| CVE-2023-44487 Exploited |
Not yet scored | IETF HTTP/2 Network & security devices |
HTTP/2 Rapid Reset Attack Vulnerability | 10 Oct 2023 |
| CVE-2023-20109 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 10 Oct 2023 |
| CVE-2023-41763 Exploited |
Not yet scored | Microsoft Skype for Business Operating systems & software |
Microsoft Skype for Business Privilege Escalation Vulnerability | 10 Oct 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.