Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2023-22952 Exploited |
Not yet scored | SugarCRM Multiple Products Applications & supply chain |
Multiple SugarCRM Products Remote Code Execution Vulnerability | 2 Feb 2023 |
| CVE-2022-47966 Exploited |
Not yet scored | Zoho ManageEngine Applications & supply chain |
Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability | 23 Jan 2023 |
| CVE-2018-18809 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Library Directory Traversal Vulnerability | 29 Dec 2022 |
| CVE-2018-5430 Exploited |
Not yet scored | TIBCO JasperReports Applications & supply chain |
TIBCO JasperReports Server Information Disclosure Vulnerability | 29 Dec 2022 |
| CVE-2022-26501 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-26500 Exploited |
Not yet scored | Veeam Backup & Replication Applications & supply chain |
Veeam Backup & Replication Remote Code Execution Vulnerability | 13 Dec 2022 |
| CVE-2022-41352 Exploited |
Not yet scored | Synacor Zimbra Collaboration Suite (ZCS) Applications & supply chain |
Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability | 20 Oct 2022 |
| CVE-2022-36804 Exploited |
Not yet scored | Atlassian Bitbucket Server and Data Center Applications & supply chain |
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability | 30 Sep 2022 |
| CVE-2022-26352 Exploited |
Not yet scored | dotCMS dotCMS Applications & supply chain |
dotCMS Unrestricted Upload of File Vulnerability | 25 Aug 2022 |
| CVE-2020-36193 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Improper Link Resolution Vulnerability | 25 Aug 2022 |
| CVE-2020-28949 Exploited |
Not yet scored | PEAR Archive_Tar Applications & supply chain |
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability | 25 Aug 2022 |
| CVE-2022-2294 Exploited |
Not yet scored | WebRTC WebRTC Applications & supply chain |
WebRTC Heap Buffer Overflow Vulnerability | 25 Aug 2022 |
| CVE-2022-22536 Exploited |
Not yet scored | SAP Multiple Products Applications & supply chain |
SAP Multiple Products HTTP Request Smuggling Vulnerability | 18 Aug 2022 |
| CVE-2016-2386 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver SQL Injection Vulnerability | 9 Jun 2022 |
| CVE-2016-2388 Exploited |
Not yet scored | SAP NetWeaver Applications & supply chain |
SAP NetWeaver Information Disclosure Vulnerability | 9 Jun 2022 |
| CVE-2012-0767 Exploited |
Not yet scored | Adobe Flash Player Applications & supply chain |
Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability | 8 Jun 2022 |
| CVE-2016-7256 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Open Type Font Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2013-0431 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Sandbox Bypass Vulnerability | 25 May 2022 |
| CVE-2013-2423 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Unspecified Vulnerability | 25 May 2022 |
| CVE-2010-0738 Exploited |
Not yet scored | Red Hat JBoss Applications & supply chain |
Red Hat JBoss Authentication Bypass Vulnerability | 25 May 2022 |
| CVE-2010-0840 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Unspecified Vulnerability | 25 May 2022 |
| CVE-2013-0422 Exploited |
Not yet scored | Oracle Java Runtime Environment (JRE) Applications & supply chain |
Oracle JRE Remote Code Execution Vulnerability | 25 May 2022 |
| CVE-2016-3298 Exploited |
Not yet scored | Microsoft Internet Explorer Applications & supply chain |
Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability | 24 May 2022 |
| CVE-2019-1003029 Exploited |
Not yet scored | Jenkins Script Security Plugin Applications & supply chain |
Jenkins Script Security Plugin Sandbox Bypass Vulnerability | 25 Apr 2022 |
| CVE-2012-5076 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Sandbox Bypass Vulnerability | 28 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.