Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-1497 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-3580 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-3452 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-42258 Exploited |
Not yet scored | BQE BillQuick Web Suite Applications & supply chain |
BQE BillQuick Web Suite SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-3396 Exploited |
Not yet scored | Atlassian Confluence Server and Data Server Operating systems & software |
Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11580 Exploited |
Not yet scored | Atlassian Crowd and Crowd Data Center Applications & supply chain |
Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-26084 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-3398 Exploited |
Not yet scored | Atlassian Confluence Server and Data Center Operating systems & software |
Atlassian Confluence Server and Data Center Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2018-7600 Exploited |
Not yet scored | Drupal Drupal Core Operating systems & software |
Drupal Core Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-3569 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2020-3566 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2021-1498 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-3118 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 3 Nov 2021 |
| CVE-2021-28664 Exploited |
Not yet scored | Arm Mali Graphics Processing Unit (GPU) Hardware & firmware |
Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-27562 Exploited |
Not yet scored | Arm Trusted Firmware Hardware & firmware |
Arm Trusted Firmware Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2020-9859 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30869 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS Type Confusion Vulnerability | 3 Nov 2021 |
| CVE-2021-20090 Exploited |
Not yet scored | Arcadyan Buffalo Firmware Network & security devices |
Arcadyan Buffalo Firmware Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-30761 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-30663 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Integer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-1871 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-1782 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Race Condition Vulnerability | 3 Nov 2021 |
| CVE-2020-9819 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2020-9818 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Operating systems & software |
Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability | 3 Nov 2021 |
| CVE-2020-27932 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Type Confusion Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.