Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2014-6332 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2014-6324 Exploited |
Not yet scored | Microsoft Kerberos Key Distribution Center (KDC) Identity & access |
Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability | 25 Mar 2022 |
| CVE-2014-6287 Exploited |
Not yet scored | Rejetto HTTP File Server (HFS) Operating systems & software |
Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2014-3120 Exploited |
Not yet scored | Elastic Elasticsearch Applications & supply chain |
Elasticsearch Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2014-0130 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2013-5223 Exploited |
Not yet scored | D-Link DSL-2760U Network & security devices |
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 25 Mar 2022 |
| CVE-2016-4171 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-11021 Exploited |
Not yet scored | D-Link DCS-930L Devices Operating systems & software |
D-Link DCS-930L Devices OS Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2016-10174 Exploited |
Not yet scored | NETGEAR WNR2000v5 Router Network & security devices |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2016-0752 Exploited |
Not yet scored | Rails Ruby on Rails Operating systems & software |
Ruby on Rails Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-4068 Exploited |
Not yet scored | Arcserve Unified Data Protection (UDP) Operating systems & software |
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2015-1187 Exploited |
Not yet scored | D-Link and TRENDnet Multiple Devices Operating systems & software |
D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2009-0927 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2009-2055 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2005-2773 Exploited |
Not yet scored | Hewlett Packard (HP) OpenView Network Node Manager Operating systems & software |
HP OpenView Network Node Manager Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2013-2251 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Improper Input Validation Vulnerability | 25 Mar 2022 |
| CVE-2012-1823 Exploited |
Not yet scored | PHP PHP Applications & supply chain |
PHP-CGI Query String Parameter Vulnerability | 25 Mar 2022 |
| CVE-2010-4344 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Heap-Based Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2010-3035 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2010-2861 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2009-1151 Exploited |
Not yet scored | phpMyAdmin phpMyAdmin Applications & supply chain |
phpMyAdmin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-10068 Exploited |
Not yet scored | Kentico Xperience Operating systems & software |
Kentico Xperience Deserialization of Untrusted Data Vulnerability | 25 Mar 2022 |
| CVE-2019-1003030 Exploited |
Not yet scored | Jenkins Matrix Project Plugin Applications & supply chain |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-6316 Exploited |
Not yet scored | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Cloud & SaaS |
Citrix Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2016-7892 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 25 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.