Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 311new in the last 7 days
- 10added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2024-49039 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability | 12 Nov 2024 |
| CVE-2024-9379 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability | 9 Oct 2024 |
| CVE-2024-9380 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability | 9 Oct 2024 |
| CVE-2019-0344 Exploited |
Not yet scored | SAP Commerce Cloud Cloud & SaaS |
SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability | 30 Sep 2024 |
| CVE-2024-8963 Exploited |
Not yet scored | Ivanti Cloud Services Appliance (CSA) Cloud & SaaS |
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability | 19 Sep 2024 |
| CVE-2024-8190 Exploited |
Not yet scored | Ivanti Cloud Services Appliance Cloud & SaaS |
Ivanti Cloud Services Appliance OS Command Injection Vulnerability | 13 Sep 2024 |
| CVE-2024-24919 Exploited |
Not yet scored | Check Point Quantum Security Gateways Cloud & SaaS |
Check Point Quantum Security Gateways Information Disclosure Vulnerability | 30 May 2024 |
| CVE-2021-44529 Exploited |
Not yet scored | Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Cloud & SaaS |
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability | 25 Mar 2024 |
| CVE-2023-36036 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability | 14 Nov 2023 |
| CVE-2023-28434 Exploited |
Not yet scored | MinIO MinIO Cloud & SaaS |
MinIO Security Feature Bypass Vulnerability | 19 Sep 2023 |
| CVE-2023-27532 Exploited |
Not yet scored | Veeam Backup & Replication Cloud & SaaS |
Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability | 22 Aug 2023 |
| CVE-2023-34362 Exploited |
Not yet scored | Progress MOVEit Transfer Cloud & SaaS |
Progress MOVEit Transfer SQL Injection Vulnerability | 2 Jun 2023 |
| CVE-2021-39144 Exploited |
Not yet scored | XStream XStream Cloud & SaaS |
XStream Remote Code Execution Vulnerability | 10 Mar 2023 |
| CVE-2022-22963 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Cloud & SaaS |
VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability | 25 Aug 2022 |
| CVE-2022-20821 Exploited |
Not yet scored | Cisco IOS XR Cloud & SaaS |
Cisco IOS XR Open Port Vulnerability | 23 May 2022 |
| CVE-2022-22947 Exploited |
Not yet scored | VMware Spring Cloud Gateway Cloud & SaaS |
VMware Spring Cloud Gateway Code Injection Vulnerability | 16 May 2022 |
| CVE-2017-6316 Exploited |
Not yet scored | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Cloud & SaaS |
Citrix Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-5410 Exploited |
Not yet scored | VMware Tanzu Spring Cloud Configuration (Config) Server Cloud & SaaS |
VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2021-21973 Exploited |
Not yet scored | VMware vCenter Server and Cloud Foundation Cloud & SaaS |
VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability | 7 Mar 2022 |
| CVE-2021-38648 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38649 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2021-38645 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability | 3 Nov 2021 |
| CVE-2020-1020 Exploited |
Not yet scored | Microsoft Windows Cloud & SaaS |
Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-38647 Exploited |
Not yet scored | Microsoft Open Management Infrastructure (OMI) Cloud & SaaS |
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-15752 Exploited |
Not yet scored | Docker Desktop Community Edition Cloud & SaaS |
Docker Desktop Community Edition Privilege Escalation Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.