Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-22899 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2019-11510 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability | 3 Nov 2021 |
| CVE-2019-11539 Exploited |
Not yet scored | Ivanti Pulse Connect Secure and Pulse Policy Secure Network & security devices |
Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-35395 Exploited |
Not yet scored | Realtek AP-Router SDK Network & security devices |
Realtek AP-Router SDK Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2019-7481 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-20022 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Unrestricted Upload of File Vulnerability | 3 Nov 2021 |
| CVE-2021-20023 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-20016 Exploited |
Not yet scored | SonicWall SSLVPN SMA100 Network & security devices |
SonicWall SSLVPN SMA100 SQL Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-10181 Exploited |
Not yet scored | Sumavision Enhanced Multimedia Router (EMR) Network & security devices |
Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability | 3 Nov 2021 |
| CVE-2017-6327 Exploited |
Not yet scored | Symantec Symantec Messaging Gateway Network & security devices |
Symantec Messaging Gateway Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-31755 Exploited |
Not yet scored | Tenda AC11 Router Network & security devices |
Tenda AC11 Router Stack Buffer Overflow Vulnerability | 3 Nov 2021 |
| CVE-2020-10987 Exploited |
Not yet scored | Tenda AC1900 Router AC15 Model Network & security devices |
Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2018-14558 Exploited |
Not yet scored | Tenda AC7, AC9, and AC10 Routers Network & security devices |
Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-29583 Exploited |
Not yet scored | Zyxel Multiple Products Network & security devices |
Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability | 3 Nov 2021 |
| CVE-2020-8196 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8195 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-8193 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 |
| CVE-2019-13608 Exploited |
Not yet scored | Citrix StoreFront Server Network & security devices |
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 |
| CVE-2018-0296 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2019-1653 Exploited |
Not yet scored | Cisco Small Business RV320 and RV325 Routers Network & security devices |
Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability | 3 Nov 2021 |
| CVE-2020-3161 Exploited |
Not yet scored | Cisco Cisco IP Phones Network & security devices |
Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability | 3 Nov 2021 |
| CVE-2020-3569 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2020-3566 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability | 3 Nov 2021 |
| CVE-2020-3118 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Software Discovery Protocol Format String Vulnerability | 3 Nov 2021 |
| CVE-2018-0171 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.