Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1126new in the last 7 days
- 6added as actively exploited
- 65critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2022-20701 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2022-20700 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2022-20699 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2021-41379 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Installer Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2020-1938 Exploited |
Not yet scored | Apache Tomcat Operating systems & software |
Apache Tomcat Improper Privilege Management Vulnerability | 3 Mar 2022 |
| CVE-2019-16928 Exploited |
Not yet scored | Exim Exim Internet Mailer Operating systems & software |
Exim Out-of-bounds Write Vulnerability | 3 Mar 2022 |
| CVE-2019-1652 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers Network & security devices |
Cisco Small Business Routers Improper Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2018-0151 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-8540 Exploited |
Not yet scored | Microsoft Malware Protection Engine Operating systems & software |
Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability | 3 Mar 2022 |
| CVE-2011-3544 Exploited |
Not yet scored | Oracle Java SE JDK and JRE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6744 Exploited |
Not yet scored | Cisco IOS software Network & security devices |
Cisco IOS Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2017-6743 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2002-0367 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2018-0159 Exploited |
Not yet scored | Cisco IOS Software and Cisco IOS XE Software Network & security devices |
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability | 3 Mar 2022 |
| CVE-2017-6740 Exploited |
Not yet scored | Cisco IOS and IOS XE Software Network & security devices |
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2011-1889 Exploited |
Not yet scored | Microsoft Forefront Threat Management Gateway (TMG) Network & security devices |
Microsoft Forefront TMG Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2011-0611 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2010-3333 Exploited |
Not yet scored | Microsoft Office Operating systems & software |
Microsoft Office Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2010-0232 Exploited |
Not yet scored | Microsoft Windows Hardware & firmware |
Microsoft Windows Kernel Exception Handler Vulnerability | 3 Mar 2022 |
| CVE-2010-0188 Exploited |
Not yet scored | Adobe Reader and Acrobat Operating systems & software |
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2009-3129 Exploited |
Not yet scored | Microsoft Excel Operating systems & software |
Microsoft Excel Featheader Record Memory Corruption Vulnerability | 3 Mar 2022 |
| CVE-2008-3431 Exploited |
Not yet scored | Oracle VirtualBox Operating systems & software |
Oracle VirtualBox Insufficient Input Validation Vulnerability | 3 Mar 2022 |
| CVE-2017-0001 Exploited |
Not yet scored | Microsoft Graphics Device Interface (GDI) Operating systems & software |
Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability | 3 Mar 2022 |
| CVE-2022-20703 Exploited |
Not yet scored | Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers Network & security devices |
Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability | 3 Mar 2022 |
| CVE-2014-6352 Exploited |
Not yet scored | Microsoft Windows Operating systems & software |
Microsoft Windows Code Injection Vulnerability | 25 Feb 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.