Vulnerabilities
Latest CVEs across software, hardware, network and cloud
New vulnerabilities from the U.S. National Vulnerability Database, with CISA's Known Exploited list flagged so you can see what attackers are using now.
- 419new in the last 7 days
- 8added as actively exploited
- 37critical (CVSS 9+)
Technology
- All
- Operating systems & software
- Network & security devices
- Cloud & SaaS
- Hardware & firmware
- Identity & access
- OT, ICS & IoT
- Applications & supply chain
Severity
| CVE | Severity | Affected | Summary | Published |
|---|---|---|---|---|
| CVE-2021-1498 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Data Platform Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2021-1497 Exploited |
Not yet scored | Cisco HyperFlex HX Network & security devices |
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-3580 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability | 3 Nov 2021 |
| CVE-2020-3452 Exploited |
Not yet scored | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Network & security devices |
Cisco ASA and FTD Read-Only Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2021-20090 Exploited |
Not yet scored | Arcadyan Buffalo Firmware Network & security devices |
Arcadyan Buffalo Firmware Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-2555 Exploited |
Not yet scored | Oracle Multiple Products Network & security devices |
Oracle Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-20021 Exploited |
Not yet scored | SonicWall SonicWall Email Security Network & security devices |
SonicWall Email Security Improper Privilege Management Vulnerability | 3 Nov 2021 |
| CVE-2021-22893 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Use-After-Free Vulnerability | 3 Nov 2021 |
| CVE-2019-19781 Exploited |
Not yet scored | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Network & security devices |
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-11634 Exploited |
Not yet scored | Citrix Workspace Application and Receiver for Windows Network & security devices |
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-25506 Exploited |
Not yet scored | D-Link DNS-320 Device Network & security devices |
D-Link DNS-320 Device Command Injection Vulnerability | 3 Nov 2021 |
| CVE-2020-8515 Exploited |
Not yet scored | DrayTek Multiple Vigor Routers Network & security devices |
Multiple DrayTek Vigor Routers Web Management Page Vulnerability | 3 Nov 2021 |
| CVE-2019-5591 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 |
| CVE-2020-5902 Exploited |
Not yet scored | F5 BIG-IP Network & security devices |
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-12812 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 |
| CVE-2018-13379 Exploited |
Not yet scored | Fortinet FortiOS Network & security devices |
Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 3 Nov 2021 |
| CVE-2020-15505 Exploited |
Not yet scored | Ivanti MobileIron Multiple Products Network & security devices |
Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2021-22900 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability | 3 Nov 2021 |
| CVE-2020-1350 Exploited |
Not yet scored | Microsoft Windows Network & security devices |
Microsoft Windows DNS Server Remote Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2020-8243 Exploited |
Not yet scored | Ivanti Pulse Connect Secure Network & security devices |
Ivanti Pulse Connect Secure Code Execution Vulnerability | 3 Nov 2021 |
| CVE-2019-19356 Exploited |
Not yet scored | Netis WF2419 Devices Network & security devices |
Netis WF2419 Devices Remote Code Execution Vulnerability | 3 Nov 2021 |
Data comes from the NVD and CISA's Known Exploited Vulnerabilities catalogue, collected automatically. Scores and categories may change as analysis completes. This product uses NVD data but is not endorsed or certified by the NVD. Always check the vendor's own notice.