Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2013-0629 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Directory Traversal Vulnerability | 7 Mar 2022 |
| CVE-2013-0625 Exploited |
Not yet scored | Adobe ColdFusion Operating systems & software |
Adobe ColdFusion Authentication Bypass Vulnerability | 7 Mar 2022 |
| CVE-2009-3960 Exploited |
Not yet scored | Adobe BlazeDS Operating systems & software |
Adobe BlazeDS Information Disclosure Vulnerability | 7 Mar 2022 |
| CVE-2021-21973 Exploited |
Not yet scored | VMware vCenter Server and Cloud Foundation Cloud & SaaS |
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 7 Mar 2022 |
| CVE-2015-2424 Exploited |
Not yet scored | Microsoft PowerPoint Operating systems & software |
Microsoft PowerPoint Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2018-0156 Exploited |
Not yet scored | Cisco IOS Software and Cisco IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2018-0174 Exploited |
Not yet scored | Cisco IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2018-0173 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2018-0172 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2018-0167 Exploited |
Not yet scored | Cisco IOS, XR, and XE Software Network & security devices |
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2018-0161 Exploited |
Not yet scored | Cisco IOS Software Network & security devices |
Cisco IOS Software Resource Management Errors Vulnerability | 3 Mar 2022 |
| CVE-2018-0158 Exploited |
Not yet scored | Cisco IOS Software and Cisco IOS XE Software Network & security devices |
Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability | 3 Mar 2022 |
| CVE-2018-0154 Exploited |
Not yet scored | Cisco IOS Software Network & security devices |
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-12238 Exploited |
Not yet scored | Cisco Catalyst 6800 Series Switches Network & security devices |
Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-12237 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-12235 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-12234 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-12233 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2015-2590 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-12319 Exploited |
Not yet scored | Cisco IOS XE Software Network & security devices |
Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-6739 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6738 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6737 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6736 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6627 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability | 3 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.