Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 1314new in the last 7 days
- 5added as actively exploited
- 88critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-27950 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Initialization Vulnerability | 3 Nov 2021 |
| CVE-2021-1870 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-27930 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-27104 Exploited |
Not yet scored | Accellion FTA Operating systems & software |
Accellion FTA OS Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-30657 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-30713 Exploited |
Not yet scored | Apple macOS Operating systems & software |
Apple macOS Unspecified Vulnerability | 3 Nov 2021 |
| CVE-2021-30666 Exploited |
Not yet scored | Apple iOS Operating systems & software |
Apple iOS WebKit Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-30661 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products WebKit Storage Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2021-30807 Exploited |
Not yet scored | Apple Multiple Products Operating systems & software |
Apple Multiple Products Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2021-1879 Exploited |
Not yet scored | Apple iOS, iPadOS, and watchOS Applications & supply chain |
Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-17530 Exploited |
Not yet scored | Apache Struts Operating systems & software |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2016-4437 Exploited |
Not yet scored | Apache Shiro Operating systems & software |
Apache Shiro Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-0211 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-41773 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-42013 Exploited |
Not yet scored | Apache HTTP Server Operating systems & software |
Apache HTTP Server Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2017-9805 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Deserialization of Untrusted Data Vulnerability | 3 Nov 2021 |
| CVE-2019-2215 Exploited |
Not yet scored | Android Android Kernel Operating systems & software |
Android Kernel Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-6223 Exploited |
Not yet scored | Apple iOS and macOS Operating systems & software |
Apple iOS and macOS Group Facetime Vulnerability | 3 Nov 2021 |
| CVE-2019-17558 Exploited |
Not yet scored | Apache Solr Operating systems & software |
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-30858 Exploited |
Not yet scored | Apple iOS, iPadOS, and macOS Operating systems & software |
Apple iOS, iPadOS, macOS Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2018-11776 Exploited |
Not yet scored | Apache Struts Applications & supply chain |
Apache Struts Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-4878 Exploited |
Not yet scored | Adobe Flash Player Operating systems & software |
Adobe Flash Player Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2020-0878 Exploited |
Not yet scored | Microsoft Edge and Internet Explorer Operating systems & software |
Microsoft Edge and Internet Explorer Memory Corruption Vulnerability | 3 Nov 2021 |
| CVE-2018-6789 Exploited |
Not yet scored | Exim Exim Operating systems & software |
Exim Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2021-35464 Exploited |
Not yet scored | ForgeRock Access Management (AM) Operating systems & software |
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.