Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2015-2426 Exploited |
Not yet scored | Microsoft Windows Applications & supply chain |
Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability | 28 Mar 2022 |
| CVE-2013-2465 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Unspecified Vulnerability | 28 Mar 2022 |
| CVE-2012-1823 Exploited |
Not yet scored | PHP PHP Applications & supply chain |
PHP-CGI Query String Parameter Vulnerability | 25 Mar 2022 |
| CVE-2019-11043 Exploited |
Not yet scored | PHP FastCGI Process Manager (FPM) Applications & supply chain |
PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2020-9377 Exploited |
Not yet scored | D-Link DIR-610 Devices Applications & supply chain |
D-Link DIR-610 Devices Remote Command Execution | 25 Mar 2022 |
| CVE-2019-6340 Exploited |
Not yet scored | Drupal Core Applications & supply chain |
Drupal Core Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2019-2616 Exploited |
Not yet scored | Oracle BI Publisher (Formerly XML Publisher) Applications & supply chain |
Oracle BI Publisher Unauthorized Access Vulnerability | 25 Mar 2022 |
| CVE-2019-1003030 Exploited |
Not yet scored | Jenkins Matrix Project Plugin Applications & supply chain |
Jenkins Matrix Project Plugin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2018-11138 Exploited |
Not yet scored | Quest KACE System Management Appliance Applications & supply chain |
Quest KACE System Management Appliance Remote Command Execution Vulnerability | 25 Mar 2022 |
| CVE-2014-3120 Exploited |
Not yet scored | Elastic Elasticsearch Applications & supply chain |
Elasticsearch Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2009-1151 Exploited |
Not yet scored | phpMyAdmin phpMyAdmin Applications & supply chain |
phpMyAdmin Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2011-3544 Exploited |
Not yet scored | Oracle Java SE JDK and JRE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-0507 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-1723 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2012-4681 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2015-4902 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE Integrity Check Vulnerability | 3 Mar 2022 |
| CVE-2015-2590 Exploited |
Not yet scored | Oracle Java SE Applications & supply chain |
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability | 3 Mar 2022 |
| CVE-2022-24682 Exploited |
Not yet scored | Synacor Zimbra Collaborate Suite (ZCS) Applications & supply chain |
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability | 25 Feb 2022 |
| CVE-2017-9841 Exploited |
Not yet scored | PHPUnit PHPUnit Applications & supply chain |
PHPUnit Command Injection Vulnerability | 15 Feb 2022 |
| CVE-2022-24086 Exploited |
Not yet scored | Adobe Commerce and Magento Open Source Applications & supply chain |
Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability | 15 Feb 2022 |
| CVE-2017-9791 Exploited |
Not yet scored | Apache Struts 1 Applications & supply chain |
Apache Struts 1 Improper Input Validation Vulnerability | 10 Feb 2022 |
| CVE-2016-3088 Exploited |
Not yet scored | Apache ActiveMQ Applications & supply chain |
Apache ActiveMQ Improper Input Validation Vulnerability | 10 Feb 2022 |
| CVE-2020-5722 Exploited |
Not yet scored | Grandstream UCM6200 Applications & supply chain |
Grandstream Networks UCM6200 Series SQL Injection Vulnerability | 28 Jan 2022 |
| CVE-2021-21315 Exploited |
Not yet scored | Npm package System Information Library for Node.JS Applications & supply chain |
System Information Library for Node.JS Command Injection | 18 Jan 2022 |
| CVE-2021-21975 Exploited |
Not yet scored | VMware vRealize Operations Manager API Applications & supply chain |
VMware Server Side Request Forgery in vRealize Operations Manager API | 18 Jan 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.