Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-1770 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Uninitialized Memory Use Vulnerability | 28 Mar 2022 |
| CVE-2015-2419 Exploited |
Not yet scored | Microsoft Internet Explorer Operating systems & software |
Microsoft Internet Explorer Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2015-2426 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2016-0040 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Privilege Escalation Vulnerability | 28 Mar 2022 |
| CVE-2010-4398 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability | 28 Mar 2022 |
| CVE-2011-2005 Exploited |
Not yet scored | Microsoft Ancillary Function Driver (afd.sys) Operating systems & software |
Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability | 28 Mar 2022 |
| CVE-2012-0518 Exploited |
Not yet scored | Oracle Fusion Middleware Operating systems & software |
Oracle Fusion Middleware Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2012-2034 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Memory Corruption Vulnerability | 28 Mar 2022 |
| CVE-2012-2539 Exploited |
Not yet scored | Microsoft Word Operating systems & software |
Microsoft Word Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2012-5076 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Sandbox Bypass Vulnerability | 28 Mar 2022 |
| CVE-2013-2465 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2019-7483 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 Directory Traversal Vulnerability | 28 Mar 2022 |
| CVE-2018-8414 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Shell Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2022-26318 Exploited |
Not yet scored | WatchGuard Firebox and XTM Appliances Operating systems & software |
WatchGuard Firebox and XTM Appliances Arbitrary Code Execution | 25 Mar 2022 |
| CVE-2019-11043 Exploited |
Not yet scored | PHP FastCGI Process Manager (FPM) Applications & supply chain |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2020-25223 Exploited |
Not yet scored | Sophos SG UTM Operating systems & software |
Sophos SG UTM Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-2506 Exploited |
Not yet scored | QNAP Systems Helpdesk Operating systems & software |
QNAP Helpdesk Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2020-2021 Exploited |
Not yet scored | Palo Alto Networks PAN-OS Identity & access |
Palo Alto Networks PAN-OS Authentication Bypass Vulnerability | 25 Mar 2022 |
| CVE-2020-1956 Exploited |
Not yet scored | Apache Kylin Operating systems & software |
Apache Kylin OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2020-1631 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS Path Traversal Vulnerability | 25 Mar 2022 |
| CVE-2019-6340 Exploited |
Not yet scored | Drupal Core Applications & supply chain |
Drupal Core Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-2616 Exploited |
Not yet scored | Oracle BI Publisher (Formerly XML Publisher) Applications & supply chain |
Oracle BI Publisher Unauthorized Access Vulnerability | 25 Mar 2022 |
| CVE-2019-16920 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-15107 Exploited |
Not yet scored | Webmin Webmin Operating systems & software |
Webmin Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-12991 Exploited |
Not yet scored | Citrix SD-WAN and NetScaler Network & security devices |
Citrix SD-WAN and NetScaler Command Injection Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.