Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2020-3259 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Information Disclosure Vulnerability | 15 Feb 2024 |
| CVE-2024-21762 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Out-of-Bound Write Vulnerability | 9 Feb 2024 |
| CVE-2023-35082 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability | 18 Jan 2024 |
| CVE-2023-6549 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 17 Jan 2024 |
| CVE-2023-6548 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 17 Jan 2024 |
| CVE-2023-36847 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36851 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36845 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-36846 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability | 13 Nov 2023 |
| CVE-2023-36844 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability | 13 Nov 2023 |
| CVE-2023-46747 Exploited |
Not yet scored | F5 BIG-IP Configuration Utility Network & security devices |
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability | 31 Oct 2023 |
| CVE-2023-46748 Exploited |
Not yet scored | F5 BIG-IP Configuration Utility Network & security devices |
F5 BIG-IP Configuration Utility SQL Injection Vulnerability | 31 Oct 2023 |
| CVE-2023-20273 Exploited |
Not yet scored | Cisco Cisco IOS XE Web UI Network & security devices |
Cisco IOS XE Web UI Command Injection Vulnerability | 23 Oct 2023 |
| CVE-2023-4966 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 18 Oct 2023 |
| CVE-2023-20198 Exploited |
Not yet scored | Cisco IOS XE Web UI Network & security devices |
Cisco IOS XE Web UI Privilege Escalation Vulnerability | 16 Oct 2023 |
| CVE-2023-20109 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability | 10 Oct 2023 |
| CVE-2023-44487 Exploited |
Not yet scored | IETF HTTP/2 Network & security devices |
HTTP/2 Rapid Reset Attack Vulnerability | 10 Oct 2023 |
| CVE-2017-6884 Exploited |
Not yet scored | Zyxel EMG2926 Routers Network & security devices |
Zyxel EMG2926 Routers Command Injection Vulnerability | 18 Sep 2023 |
| CVE-2023-20269 Exploited |
Not yet scored | Cisco Adaptive Security Appliance and Firepower Threat Defense Network & security devices |
Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability | 13 Sep 2023 |
| CVE-2023-38035 Exploited |
Not yet scored | Ivanti Sentry Network & security devices |
Ivanti Sentry Authentication Bypass Vulnerability | 22 Aug 2023 |
| CVE-2023-24489 Exploited |
Not yet scored | Citrix Content Collaboration Network & security devices |
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 16 Aug 2023 |
| CVE-2017-18368 Exploited |
Not yet scored | Zyxel P660HN-T1A Routers Network & security devices |
Zyxel P660HN-T1A Routers Command Injection Vulnerability | 7 Aug 2023 |
| CVE-2023-35081 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability | 31 Jul 2023 |
| CVE-2023-35078 Exploited |
Not yet scored | Ivanti Endpoint Manager Mobile (EPMM) Network & security devices |
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability | 25 Jul 2023 |
| CVE-2023-3519 Exploited |
Not yet scored | Citrix NetScaler ADC and NetScaler Gateway Network & security devices |
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 19 Jul 2023 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.