Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 330new in the last 7 days
- 8added as actively exploited
- 30critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2016-6367 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) Network & security devices |
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability | 24 May 2022 |
| CVE-2022-30525 Exploited |
Not yet scored | Zyxel Multiple Firewalls Network & security devices |
Zyxel Multiple Firewalls OS Command Injection Vulnerability | 16 May 2022 |
| CVE-2022-1388 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Missing Authentication Vulnerability | 10 May 2022 |
| CVE-2019-16057 Exploited |
Not yet scored | D-Link DNS-320 Storage Device Network & security devices |
D-Link DNS-320 Remote Code Execution Vulnerability | 15 Apr 2022 |
| CVE-2021-45382 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers Remote Code Execution Vulnerability | 4 Apr 2022 |
| CVE-2022-1040 Exploited |
Not yet scored | Sophos Firewall Network & security devices |
Sophos Firewall Authentication Bypass Vulnerability | 31 Mar 2022 |
| CVE-2018-10562 Exploited |
Not yet scored | Dasan Gigabit Passive Optical Network (GPON) Routers Network & security devices |
Dasan GPON Routers Command Injection Vulnerability | 31 Mar 2022 |
| CVE-2018-10561 Exploited |
Not yet scored | Dasan Gigabit Passive Optical Network (GPON) Routers Network & security devices |
Dasan GPON Routers Authentication Bypass Vulnerability | 31 Mar 2022 |
| CVE-2021-20028 Exploited |
Not yet scored | SonicWall Secure Remote Access (SRA) Network & security devices |
SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability | 28 Mar 2022 |
| CVE-2019-7483 Exploited |
Not yet scored | SonicWall SMA100 Network & security devices |
SonicWall SMA100 Directory Traversal Vulnerability | 28 Mar 2022 |
| CVE-2016-10174 Exploited |
Not yet scored | NETGEAR WNR2000v5 Router Network & security devices |
NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability | 25 Mar 2022 |
| CVE-2015-0666 Exploited |
Not yet scored | Cisco Prime Data Center Network Manager (DCNM) Network & security devices |
Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability | 25 Mar 2022 |
| CVE-2013-5223 Exploited |
Not yet scored | D-Link DSL-2760U Network & security devices |
D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability | 25 Mar 2022 |
| CVE-2010-3035 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2009-2055 Exploited |
Not yet scored | Cisco IOS XR Network & security devices |
Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability | 25 Mar 2022 |
| CVE-2019-12989 Exploited |
Not yet scored | Citrix SD-WAN and NetScaler Network & security devices |
Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 25 Mar 2022 |
| CVE-2021-22941 Exploited |
Not yet scored | Citrix ShareFile Network & security devices |
Citrix ShareFile Improper Access Control Vulnerability | 25 Mar 2022 |
| CVE-2020-1631 Exploited |
Not yet scored | Juniper Junos OS Network & security devices |
Juniper Junos OS Path Traversal Vulnerability | 25 Mar 2022 |
| CVE-2019-16920 Exploited |
Not yet scored | D-Link Multiple Routers Network & security devices |
D-Link Multiple Routers Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2019-12991 Exploited |
Not yet scored | Citrix SD-WAN and NetScaler Network & security devices |
Citrix SD-WAN and NetScaler Command Injection Vulnerability | 25 Mar 2022 |
| CVE-2018-0147 Exploited |
Not yet scored | Cisco Secure Access Control System (ACS) Network & security devices |
Cisco Secure Access Control System Java Deserialization Vulnerability | 25 Mar 2022 |
| CVE-2018-0125 Exploited |
Not yet scored | Cisco VPN Routers Network & security devices |
Cisco VPN Routers Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2017-3881 Exploited |
Not yet scored | Cisco IOS and IOS XE Network & security devices |
Cisco IOS and IOS XE Remote Code Execution Vulnerability | 25 Mar 2022 |
| CVE-2020-5135 Exploited |
Not yet scored | SonicWall SonicOS Network & security devices |
SonicWall SonicOS Buffer Overflow Vulnerability | 15 Mar 2022 |
| CVE-2017-6077 Exploited |
Not yet scored | NETGEAR Wireless Router DGN2200 Network & security devices |
NETGEAR DGN2200 Remote Code Execution Vulnerability | 7 Mar 2022 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.